UpHeron
All vulnerabilities

Servers and applications

CVE-2020-3796

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.

Severity
Medium 6.5
Published
26 Jun 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Adobe ColdFusionServers and applications · cpe:a:adobe:coldfusion
  • Version 2018-update8
  • Version 2018-update7
  • Version 2018-update6
  • Version 2018-update5
All 24 release lines
  • Version 2016
  • Version 2016-update1
  • Version 2016-update2
  • Version 2016-update3
  • Version 2016-update4
  • Version 2016-update5
  • Version 2016-update6
  • Version 2016-update7
  • Version 2016-update8
  • Version 2016-update9
  • Version 2016-update10
  • Version 2016-update11
  • Version 2016-update12
  • Version 2016-update13
  • Version 2016-update14
  • Version 2018
  • Version 2018-update1
  • Version 2018-update2
  • Version 2018-update3
  • Version 2018-update4
  • Version 2018-update5
  • Version 2018-update6
  • Version 2018-update7
  • Version 2018-update8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-3796
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-3796