Skip to content
OpenAdvisories
High · 7.8 CVE-2020-9672 EUVD-2020-30456GHSA-j6cv-ghpp-phc2

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking v…

Published Jul 17, 2020 · Updated May 5, 2025 · Assigned by adobe

Vendor: Adobe Product: Adobe ColdFusion 2016 Product: Adobe ColdFusion 2018

Description

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.

Affected products

VendorProductAffectedFixed
Adobe Adobe ColdFusion 2016 update 15 and earlier versions —
Adobe Adobe ColdFusion 2018 update 9 and earlier versions —

References