CVE-2020-3796

—

CVSS 3.1

6.5 medium

EPSS

4%p91

Published

Jun 26, 2020 (Jun 26, 2020)

Modified

Jun 17, 2026

Description

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.

Vendors: adobe
Products: coldfusion
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news1 stories

Adobe addresses five issues in ColdFusion, After Effects, Digital Editions

Security AffairsApr 14, 19:35 UTC · Apr 14, 2020Exploit / PoC CVE-2020-3767 CVE-2020-3768 CVE-2020-3796+2 CVEs