CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-3768

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.3%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 4.4

References

https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html
https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html

Products affected by CVE-2020-3768

Adobe » Coldfusion » Version: 2016

cpe:2.3:a:adobe:coldfusion:2016
Adobe » Coldfusion » Version: 2018

cpe:2.3:a:adobe:coldfusion:2018

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3768

Products

Pricing

Contact Us