Medium severity6.5NVD Advisory· Published Jun 26, 2020· Updated Jun 17, 2026
CVE-2020-3796
CVE-2020-3796
Description
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Affected products
26cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*+ 25 more
- cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update13:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update14:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*
- (no CPE)range: 2016, 2018
- (no CPE)range: ColdFusion 2016, and ColdFusion 2018 versions
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/coldfusion/apsb20-18.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.