VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 17, 2020· Updated Jun 17, 2026

CVE-2020-9673

CVE-2020-9673

Description

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.

Affected products

29
  • Adobe Inc./Coldfusion27 versions
    cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*+ 26 more
    • cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update13:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update14:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update15:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*
    • (no CPE)range: <=2016 update 15, <=2018 update 9
  • Adobe Inc./ColdFusion 2016cpe-rescue2 versions
    update 15 and earlier versions+ 1 more
    • (no CPE)range: update 15 and earlier versions
    • (no CPE)range: update 9 and earlier versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.