CVE-2018-4941: Adobe ColdFusion

Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure.

Affected products

• Adobe ColdFusion: version 11.0 only; version 2016 only

Published 2018-05-19. Last modified 2026-06-17.