CVE-2009-3960
Adobe BlazeDS Information Disclosure Vulnerability
CVSS
6.5
Média
EPSS
90.1%
p100
KEV
SIM
7 de mar. de 2022
Exploit Today
80
0-100
Publicado: 15 de fev. de 2010 · Última mod.: 6 de ago. de 2026
Produto
Adobe / BlazeDS
Vulnerabilidade
Adobe BlazeDS Information Disclosure Vulnerability
Adicionado ao KEV
7 de mar. de 2022
Corrigir até
7 de set. de 2022
Uso conhecido em ransomware
Sim
Descrição resumida
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2009-3960
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.
- secunia.comhttp://secunia.com/advisories/38543
- securitytracker.comhttp://securitytracker.com/id?1023584
- www.adobe.comhttp://www.adobe.com/support/security/bulletins/apsb10-05.html
- www.osvdb.orghttp://www.osvdb.org/62292
- www.securityfocus.comhttp://www.securityfocus.com/bid/38197
- www.exploit-db.comhttps://www.exploit-db.com/exploits/41855/
- secunia.comhttp://secunia.com/advisories/38543
- securitytracker.comhttp://securitytracker.com/id?1023584
- www.adobe.comhttp://www.adobe.com/support/security/bulletins/apsb10-05.html
- www.osvdb.orghttp://www.osvdb.org/62292
- www.securityfocus.comhttp://www.securityfocus.com/bid/38197
- www.exploit-db.comhttps://www.exploit-db.com/exploits/41855/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3960
Nenhum CVE relacionado por CWE ou produto.