High severity7.5NVD Advisory· Published Sep 27, 2019· Updated Jun 17, 2026
CVE-2019-8072
CVE-2019-8072
Description
ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.
Affected products
19cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*+ 18 more
- cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*
- (no CPE)range: <=2018 update 4, <=2016 update 11
- (no CPE)range: ColdFusion 2018- update 4 and earlier
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/coldfusion/apsb19-47.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.