CVE-2019-8073 in ColdFusion

सारांश

द्वारा VulDB • 22/05/2026

ColdFusion 2018- update 4 aur usse pehle, aur ColdFusion 2016- update 11 aur usse pehle mein Command Injection via Vulnerable component vulnerability hai. Iska successful exploitation current user ke context mein Arbitrary code execution ka karan ban sakta hai.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• आरक्षित करना: 12/02/2019
• संयम: स्वीकृत
• प्रविष्टि: VDB-142487
• CPE: तैयार
• CWE: CWE-74 (पुष्टि की गई)
• CVSS: 9.8 (NVD)
• EPSS: 0.08252
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Pharma, Finance, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-8073
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-8073
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-8073/