CVE-2020-3796

6.5 mediumEPSS 4.3%

Medium (6.5) in adobe coldfusion. EPSS 4.3% chance of exploitation in the next 30 days.

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
Published: 2020-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:coldfusion

References

https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html
https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html

Check your stack JSON