PULSEUnderground Intel

EN VIVO22señales / 24h

FEED

ransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomiah6477 reclama a hensley · Otherransomvexy ransomware reclama a Enchanted Fine Jewellery · IN · Retail & E-Commerceransomiah6477 reclama a buckle · Retail & E-Commerceransomiah6477 reclama a camden-living · GB · Hospitalityransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomiah6477 reclama a hensley · Otherransomvexy ransomware reclama a Enchanted Fine Jewellery · IN · Retail & E-Commerceransomiah6477 reclama a buckle · Retail & E-Commerceransomiah6477 reclama a camden-living · GB · Hospitalityransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcare

← Todos los CVEs

CVE Watch—

CVE-2017-3066

Adobe ColdFusion Deserialization Vulnerability

CVSS

—

Sin CVSS

EPSS

90.6%

p100

KEV

SÍ

24 feb 2025

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

90.6%EPSS · 30 días90.6%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Adobe / ColdFusion

Vulnerabilidad

Adobe ColdFusion Deserialization Vulnerability

Añadido a KEV

24 feb 2025

Remediar antes de

17 mar 2025

Uso conocido en ransomware

No

Descripción resumida

Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html ; https://nvd.nist.gov/vuln/detail/CVE-2017-3066

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-4828210.0 CRÍ

KEV—80Adobe ColdFusion Path Traversal Vulnerability8d CVE-2010-28619.8 CRÍ

KEV—80Adobe ColdFusion Directory Traversal Vulnerability13d CVE-2023-29300—

KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2023-38205—

KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2023-29298—

KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2018-15961—

KEV—80Adobe ColdFusion Unrestricted File Upload Vulnerability—