Known vulnerabilities in ColdFusion 2016 Update 13 - page 3

Vendor: Adobe
Software: ColdFusion
Version: 2016 Update 13
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 43
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 2016 Update 13 ColdFusion 2016 Update 13 is affected by 43 vulnerabilities: 2 critical, 9 high, 16 medium, 16 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26888 - Improper input validation
CVE-2020-3767
CWE-20 Medium
No
No
2016 Update 15, 2018 Update 9 15.04.2020 SB2020041501
#VU26171 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2020-3794
CWE-98 High
No
No
2016 Update 14, 2018 Update 8 18.03.2020 SB2020031814
#VU26170 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3761
CWE-200 Medium
No
No
2016 Update 14, 2018 Update 8 18.03.2020 SB2020031814


Showing elements 41 - 60 out of 43