Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.
id: CVE-2018-15961
info:
name: Adobe ColdFusion - Unrestricted File Upload Remote Code Execution
...