CVE-2009-3960
Adobe BlazeDS Information Disclosure Vulnerability
CVSS
6.5
Medium
EPSS
90.1%
p100
KEV
YES
Mar 7, 2022
Exploit Today
80
0-100
Published: Feb 15, 2010 · Last modified: Aug 6, 2026
Product
Adobe / BlazeDS
Vulnerability
Adobe BlazeDS Information Disclosure Vulnerability
Added to KEV
Mar 7, 2022
Remediate by
Sep 7, 2022
Known ransomware use
Yes
Summary description
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2009-3960
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.
- secunia.comhttp://secunia.com/advisories/38543
- securitytracker.comhttp://securitytracker.com/id?1023584
- www.adobe.comhttp://www.adobe.com/support/security/bulletins/apsb10-05.html
- www.osvdb.orghttp://www.osvdb.org/62292
- www.securityfocus.comhttp://www.securityfocus.com/bid/38197
- www.exploit-db.comhttps://www.exploit-db.com/exploits/41855/
- secunia.comhttp://secunia.com/advisories/38543
- securitytracker.comhttp://securitytracker.com/id?1023584
- www.adobe.comhttp://www.adobe.com/support/security/bulletins/apsb10-05.html
- www.osvdb.orghttp://www.osvdb.org/62292
- www.securityfocus.comhttp://www.securityfocus.com/bid/38197
- www.exploit-db.comhttps://www.exploit-db.com/exploits/41855/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3960
No related CVEs by CWE or product.