Lucene search

[email protected]CVE-2009-3960

HistoryFeb 15, 2010 - 6:30 p.m.

CVE-2009-3960

2010-02-1518:30:00

[email protected]

web.nvd.nist.gov

873

In Wild

cve-2009-3960

unspecified vulnerability

blazeds

livecycle

data services

flex data services

coldfusion

remote attackers

sensitive information

xml documents

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.8 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.

Affected configurations

NVD

Node

adobeblazedsRange≤3.2

adobecoldfusionMatch7.0.2

adobecoldfusionMatch8.0

adobecoldfusionMatch8.0.1

adobecoldfusionMatch9.0

adobeflex_data_servicesMatch2.0.1

adobelifecycleMatch8.0.1

adobelifecycleMatch8.2.1

adobelifecycleMatch9.0

adobelifecycle_data_servicesMatch2.5.1

adobelifecycle_data_servicesMatch2.6.1

adobelifecycle_data_servicesMatch3.0

CPENameOperatorVersion
adobe:blazedsadobe blazedsle3.2
adobe:coldfusionadobe coldfusioneq7.0.2
adobe:coldfusionadobe coldfusioneq8.0
adobe:coldfusionadobe coldfusioneq8.0.1
adobe:coldfusionadobe coldfusioneq9.0
adobe:flex_data_servicesadobe flex data serviceseq2.0.1
adobe:lifecycleadobe lifecycleeq8.0.1
adobe:lifecycleadobe lifecycleeq8.2.1
adobe:lifecycleadobe lifecycleeq9.0
adobe:lifecycle_data_servicesadobe lifecycle data serviceseq2.5.1

CPE	Name	Operator	Version
adobe:blazeds	adobe blazeds	le	3.2
adobe:coldfusion	adobe coldfusion	eq	7.0.2
adobe:coldfusion	adobe coldfusion	eq	8.0
adobe:coldfusion	adobe coldfusion	eq	8.0.1
adobe:coldfusion	adobe coldfusion	eq	9.0
adobe:flex_data_services	adobe flex data services	eq	2.0.1
adobe:lifecycle	adobe lifecycle	eq	8.0.1
adobe:lifecycle	adobe lifecycle	eq	8.2.1
adobe:lifecycle	adobe lifecycle	eq	9.0
adobe:lifecycle_data_services	adobe lifecycle data services	eq	2.5.1