CVE-2020-3767: Input Validation
Published Jun 26, 2020
·Updated
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service (dos).
Affected Software
24 affected components
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update10
Adobe ColdFusion=2016-update11
Adobe ColdFusion=2016-update12
Adobe ColdFusion=2016-update13
Adobe ColdFusion=2016-update14
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Adobe ColdFusion=2016-update5
Adobe ColdFusion=2016-update6
Adobe ColdFusion=2016-update7
Adobe ColdFusion=2016-update8
Adobe ColdFusion=2016-update9
Adobe ColdFusion=2018
Adobe ColdFusion=2018-update1
Adobe ColdFusion=2018-update2
Adobe ColdFusion=2018-update3
Adobe ColdFusion=2018-update4
Adobe ColdFusion=2018-update5
Adobe ColdFusion=2018-update6
Adobe ColdFusion=2018-update7
Adobe ColdFusion=2018-update8
Event History
Jun 26, 2020
CVE Published
via MITRE·08:18 PM
Data Sourced
via MITRE·08:18 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-3767?
CVE-2020-3767 is a vulnerability in ColdFusion versions 2016 and 2018 that allows for application-level denial-of-service attacks.
2
How severe is CVE-2020-3767?
CVE-2020-3767 has a severity rating of 6.5, which is considered medium.
3
How does CVE-2020-3767 impact ColdFusion?
CVE-2020-3767 can be exploited to cause denial-of-service attacks on ColdFusion applications.
4
Which versions of ColdFusion are affected by CVE-2020-3767?
ColdFusion versions 2016 and 2018 are affected by CVE-2020-3767.
5
How can I fix CVE-2020-3767?
To fix CVE-2020-3767, update ColdFusion to a patched version provided by Adobe.