CVE-2016-1114

Critical

Published: 11/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Adobe ColdFusion versions 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

An attacker could exploit this vulnerability to execute remote code, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to update Adobe ColdFusion to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.