CVE-2019-8074

critical · 9.8

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. Successful exploitation could lead to Access Control Bypass in the context of the current user.

9.8

CVSS

18.9%

EPSS (exploit prob.)

97th

EPSS percentile

2019-09-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018

Check a specific version with /api/v1/cve/match.

References

https://helpx.adobe.com/security/products/coldfusion/apsb19-47.html
https://helpx.adobe.com/security/products/coldfusion/apsb19-47.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-8074