CVE-2019-8072

—

CVSS 3.1

7.5 high

EPSS

7%p94

Published

Sep 27, 2019 (Sep 27, 2019)

Modified

Jun 17, 2026

Description

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Vendors: adobe
Products: coldfusion
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.4%)

In the news1 stories

Adobe Patches two critical vulnerabilities in ColdFusion

Security AffairsSep 25, 05:53 UTC · Sep 25, 2019Vulnerability CVE-2019-8074 CVE-2019-8073 CVE-2019-8072