CVE-2009-3960
Adobe BlazeDS Information Disclosure Vulnerability
CVSS
6.5
Medio
EPSS
90.1%
p100
KEV
SÍ
7 mar 2022
Exploit Today
80
0-100
Publicado: 15 feb 2010 · Última mod.: 6 ago 2026
Producto
Adobe / BlazeDS
Vulnerabilidad
Adobe BlazeDS Information Disclosure Vulnerability
Añadido a KEV
7 mar 2022
Remediar antes de
7 sept 2022
Uso conocido en ransomware
Sí
Descripción resumida
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2009-3960
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.
- secunia.comhttp://secunia.com/advisories/38543
- securitytracker.comhttp://securitytracker.com/id?1023584
- www.adobe.comhttp://www.adobe.com/support/security/bulletins/apsb10-05.html
- www.osvdb.orghttp://www.osvdb.org/62292
- www.securityfocus.comhttp://www.securityfocus.com/bid/38197
- www.exploit-db.comhttps://www.exploit-db.com/exploits/41855/
- secunia.comhttp://secunia.com/advisories/38543
- securitytracker.comhttp://securitytracker.com/id?1023584
- www.adobe.comhttp://www.adobe.com/support/security/bulletins/apsb10-05.html
- www.osvdb.orghttp://www.osvdb.org/62292
- www.securityfocus.comhttp://www.securityfocus.com/bid/38197
- www.exploit-db.comhttps://www.exploit-db.com/exploits/41855/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3960
Sin CVEs relacionados por CWE o producto.