by Kastro
Paper/Archive/CVE-2020-3794

CVE-2020-3794

Adobe ColdFusion — ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability.

EPSS 7%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 94.3.943 × 2018.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.

Affected

ProductAffectedFixed inSource
ColdFusionColdFusion 2016, and ColdFusion 2018 versions–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhelpx.adobe.com/security/products/coldfusion/apsb20-16.html