Coldfusion Security Vulnerabilities and Issues — Coldfusion CVE List

Lucene search

AdobeColdfusion

3 matches found

CVE•added 2020/06/26 9:15 p.m.•53 views

CVE-2020-3767

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service (dos).

6.5CVSS6.3AI score0.01234EPSS

CVE•added 2020/06/26 9:15 p.m.•50 views

CVE-2020-3796

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.

6.5CVSS6.2AI score0.03746EPSS

CVE•added 2020/06/26 9:15 p.m.•49 views

CVE-2020-3768

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.

7.8CVSS7.4AI score0.00113EPSS