CVE-2020-3767: Improper Input Validation

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service dos...

CVE-2020-3768: Untrusted Search Path

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2020-3796: Undefined Security Weakness

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure...

ColdFusion File Upload Code Execution

The vulnerability of the ColdFusion interpreter lies in the lack of restrictions on the download of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe ColdFusion Remote Code Execution (CVE-2019-7838)

A remote code execution vulnerability exists in adobe coldfusion . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe ColdFusion 2016.x < 2016u15 / 2018.x < 2018u9 Multiple Vulnerabilities (APSB20-18)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2016.x update 15 or 2018.x prior to update 9. It is, therefore, affected by the following vulnerabilities as referenced in the APSB20-18 advisory: - An application-level denial of service DoS vulnerability due to...

Adobe ColdFusion DLL Search Order Hijacking Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to elevate privileges...

Adobe ColdFusion Improper Access Control Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to gain access to the system file structure...

Adobe ColdFusion Insufficient Input Validation Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to cause a denial of service DoS...

April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion

This month’s Microsoft Patch Tuesday addresses 113 vulnerabilities with 19 of them labeled as Critical. The 19 Critical vulnerabilities cover Adobe Font Manager Library 0-day, SharePoint, Hyper-V, Scripting Engines, Media Foundation, Microsoft Graphics, Windows Codecs, and Dynamics Business...

Adobe Fixes 'Important' Flaws in ColdFusion, After Effects and Digital Editions

Adobe released security patches for vulnerabilities in its ColdFusion, After Effects and Digital Editions applications. If exploited, the flaws could enable attackers to view sensitive data, gain escalated privileges, and launch denial-of-service attacks. Each of the bugs were rated...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following...

APSB20-18 Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to information disclosure, privilege escalation or a denial-of-service...

PT-2020-6357

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2016, 2018 Description The issue is related to insufficient input validation, which could lead to an application-level denial-of-service dos if successfully exploited. This means that a remote attacker might be able to caus...

PT-2020-6354

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2016 through 2018 Description The issue is related to incorrect handling of the path to DLL libraries, which can be exploited to potentially allow an attacker to escalate their privileges. Recommendations For ColdFusi...

PT-2020-6356

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2016 through 2018 Description The issue is related to improper access control in the Access Control component of the ColdFusion platform, which can be exploited by a remote attacker to gain unauthorized access to the...

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

CVE-2020-3794

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory...

Design/Logic Flaw

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...