CVE-2020-9673

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@adobe.com

Published

2020-07-17

Last modified

2025-05-05

Weaknesses

CWE-426

Affected products

• Adobe Coldfusion 2016 (Adobe)
• Adobe Coldfusion 2018 (Adobe)
• Coldfusion (Adobe)

References

• https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html