CVE-2019-8072

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability

published September 27, 2019

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07352 · 94.4th percentile
Published
2019-09-27T15:16Z
EPSS history
Timeline
  • 27 SEP 15:16Z
    ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability
    cvelistv5