UpHeron
All vulnerabilities

Servers and applications

CVE-2020-3794

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.

Severity
Critical 9.8
Published
25 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Adobe ColdFusionServers and applications · cpe:a:adobe:coldfusion
  • Version 2018-update7
  • Version 2018-update6
  • Version 2018-update5
  • Version 2018-update4
All 22 release lines
  • Version 2016
  • Version 2016-update1
  • Version 2016-update2
  • Version 2016-update3
  • Version 2016-update4
  • Version 2016-update5
  • Version 2016-update6
  • Version 2016-update7
  • Version 2016-update8
  • Version 2016-update9
  • Version 2016-update10
  • Version 2016-update11
  • Version 2016-update12
  • Version 2016-update13
  • Version 2018
  • Version 2018-update1
  • Version 2018-update2
  • Version 2018-update3
  • Version 2018-update4
  • Version 2018-update5
  • Version 2018-update6
  • Version 2018-update7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-3794
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-3794