CVE-2016-1114

CRITICAL · CVSS 9.8 EPSS 8.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-05-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-1114

Severity

CRITICAL

CVSS

9.8

EPSS

8.85%

Apache Java

Original Filing — NVD Description

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.