Known vulnerabilities in ColdFusion 2018 Update 7 - page 4

Vendor: Adobe
Software: ColdFusion
Version: 2018 Update 7
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 1
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 2018 Update 7 ColdFusion 2018 Update 7 is affected by 66 vulnerabilities: 4 critical, 19 high, 23 medium, 20 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29728 - Uncontrolled Search Path Element
CVE-2020-9673
CWE-427 Low
No
No
2016 Update 16, 2018 Update 10 14.07.2020 SB2020071414
#VU26890 - Improper Access Control
CVE-2020-3796
CWE-284 Low
No
No
2016 Update 15, 2018 Update 9 15.04.2020 SB2020041501
#VU26889 - Uncontrolled Search Path Element
CVE-2020-3768
CWE-427 Low
No
No
2016 Update 15, 2018 Update 9 15.04.2020 SB2020041501
#VU26888 - Improper input validation
CVE-2020-3767
CWE-20 Medium
No
No
2016 Update 15, 2018 Update 9 15.04.2020 SB2020041501
#VU26171 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2020-3794
CWE-98 High
No
No
2016 Update 14, 2018 Update 8 18.03.2020 SB2020031814
#VU26170 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3761
CWE-200 Medium
No
No
2016 Update 14, 2018 Update 8 18.03.2020 SB2020031814


Showing elements 61 - 80 out of 66