Known vulnerabilities in ColdFusion 2016 Update 9 - page 3

Vendor: Adobe
Software: ColdFusion
Version: 2016 Update 9
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 48
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 2016 Update 9 ColdFusion 2016 Update 9 is affected by 48 vulnerabilities: 2 critical, 13 high, 17 medium, 16 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26888 - Improper input validation
CVE-2020-3767
CWE-20 Medium
No
No
2016 Update 15, 2018 Update 9 15.04.2020 SB2020041501
#VU21319 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-8074
CWE-22 Medium
No
No
2016 Update 12, 2018 Update 5 24.09.2019 SB2019092423
#VU21318 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-8073
CWE-78 High
No
No
2016 Update 12, 2018 Update 5 24.09.2019 SB2019092423
#VU21317 - Exposure of sensitive information to an unauthorized actor
CVE-2019-8072
CWE-200 Medium
No
No
2016 Update 12, 2018 Update 5 24.09.2019 SB2019092423
#VU18740 - Deserialization of Untrusted Data
CVE-2019-7840
CWE-502 High
No
No
11 Update 19, 2016 Update 11, 2018 Update 4 11.06.2019 SB2019061105
#VU18739 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-7839
CWE-78 High
No
No
2016 Update 11, 2018 Update 4 11.06.2019 SB2019061105
#VU18738 - Unrestricted Upload of File with Dangerous Type
CVE-2019-7838
CWE-434 High
No
No
11 Update 19, 2016 Update 11, 2018 Update 4 11.06.2019 SB2019061105
#VU17889 - Unrestricted Upload of File with Dangerous Type
CVE-2019-7816
CWE-434 High
No
Exploited
11 Update 18, 2016 Update 10, 2018 Update 3 01.03.2019 SB2019030102


Showing elements 41 - 60 out of 48