Security Advisory
CVE-2020-9672
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.