CVE-2020-9673: High severity adobe coldfusion vulnerability
Published Jul 17, 2020
·Updated
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Affected Software
26 affected components
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update10
Adobe ColdFusion=2016-update11
Adobe ColdFusion=2016-update12
Adobe ColdFusion=2016-update13
Adobe ColdFusion=2016-update14
Adobe ColdFusion=2016-update15
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Adobe ColdFusion=2016-update5
Adobe ColdFusion=2016-update6
Adobe ColdFusion=2016-update7
Adobe ColdFusion=2016-update8
Adobe ColdFusion=2016-update9
Adobe ColdFusion=2018
Adobe ColdFusion=2018-update1
Adobe ColdFusion=2018-update2
Adobe ColdFusion=2018-update3
Adobe ColdFusion=2018-update4
Adobe ColdFusion=2018-update5
Adobe ColdFusion=2018-update6
Adobe ColdFusion=2018-update7
Adobe ColdFusion=2018-update8
Adobe ColdFusion=2018-update9
Event History
Jul 17, 2020
CVE Published
via MITRE·12:01 AM
Data Sourced
via MITRE·12:01 AM
DescriptionWeakness
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Adobe ColdFusion vulnerability?
The vulnerability ID for this Adobe ColdFusion vulnerability is CVE-2020-9673.
2
What is the severity of CVE-2020-9673?
The severity of CVE-2020-9673 is high with a CVSS score of 7.8.
3
What is the affected software for this vulnerability?
The affected software for this vulnerability is Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions.
4
What is the impact of this vulnerability?
Successful exploitation of this vulnerability could lead to privilege escalation.
5
Is there a fix available for CVE-2020-9673?
Yes, Adobe has released updates to address this vulnerability. It is recommended to update to the latest version of Adobe ColdFusion.