CVE-2019-8073

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command Injection via Vulnerable component vulnerability. Successful exploitation could lead to Arbitrary code execution in the context of the current user.

Link	Resource
https://helpx.adobe.com/security/products/coldfusion/apsb19-47.html	Vendor Advisory

Configuration 1

cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*

---

Published : 2019-09-27 04:15

Updated : 2020-09-04 02:21

---

NVD link : CVE-2019-8073

Mitre link : CVE-2019-8073

No products.

CWE-77