CVE-2019-8074

—

CVSS 3.1

9.8 critical

EPSS

19%p97

Published

Sep 27, 2019 (Sep 27, 2019)

Modified

Jun 17, 2026

Description

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. Successful exploitation could lead to Access Control Bypass in the context of the current user.

Vendors: adobe
Products: coldfusion
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (18.9%)

In the news1 stories

Adobe Patches two critical vulnerabilities in ColdFusion

Security AffairsSep 25, 05:53 UTC · Sep 25, 2019Vulnerability CVE-2019-8074 CVE-2019-8073 CVE-2019-8072