6.5

CVE-2020-3767

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service (dos).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version 2016 Update -
Adobe ≫ Coldfusion Version 2016 Update update1
Adobe ≫ Coldfusion Version 2016 Update update10
Adobe ≫ Coldfusion Version 2016 Update update11
Adobe ≫ Coldfusion Version 2016 Update update12
Adobe ≫ Coldfusion Version 2016 Update update13
Adobe ≫ Coldfusion Version 2016 Update update14
Adobe ≫ Coldfusion Version 2016 Update update2
Adobe ≫ Coldfusion Version 2016 Update update3
Adobe ≫ Coldfusion Version 2016 Update update4
Adobe ≫ Coldfusion Version 2016 Update update5
Adobe ≫ Coldfusion Version 2016 Update update6
Adobe ≫ Coldfusion Version 2016 Update update7
Adobe ≫ Coldfusion Version 2016 Update update8
Adobe ≫ Coldfusion Version 2016 Update update9
Adobe ≫ Coldfusion Version 2018 Update -
Adobe ≫ Coldfusion Version 2018 Update update1
Adobe ≫ Coldfusion Version 2018 Update update2
Adobe ≫ Coldfusion Version 2018 Update update3
Adobe ≫ Coldfusion Version 2018 Update update4
Adobe ≫ Coldfusion Version 2018 Update update5
Adobe ≫ Coldfusion Version 2018 Update update6
Adobe ≫ Coldfusion Version 2018 Update update7
Adobe ≫ Coldfusion Version 2018 Update update8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.47% 0.875
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html
Vendor Advisory