Lucene search

Coldfusion Security Vulnerabilities - March 2020

cve

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory.

7.5CVSS

7.3AI Score

0.002EPSS

2020-03-25 08:15 PM

cve

CVE-2020-3794

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.

9.8CVSS

9.5AI Score

0.005EPSS

2020-03-25 08:15 PM