CVE-2020-3794
At a glance Severity Not available EPSS EPSS 7.14 % · percentile 94 (2026-10-27) State PUBLISHED Published 2020-03-25 Updated 2024-08-04 Assigner adobe NVD status Modified Description ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
Scores Version Score Vector Scored by CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update13:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*Affected products
References
Sources
