CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2010-02-15
Adobe BlazeDS and ColdFusion XML External Entity (XXE) Information Disclosure Vulnerability (CVE-2009-3960)
[Affected Scope] Adobe BlazeDS 3.2 and earlier, and integrated products including LiveCycle, ColdFusion, and Flex Data Services
[Impact] Unauthenticated remote attackers can read arbitrary local files and disclose sensitive system information via crafted XML requests
[Mitigation] Apply official security patches or disable external entity resolution (XXE) in the XML parser configuration