The vulnerabilities in question are listed below - CVE-2017-3066 (CVSS score: 9.8) - A deserialization vulnerability impacting Adobe ColdFusion in the Apache BlazeDS library that allows for arbitrary ...

CISA adds two flaws to the actively exploited list CISA has added security vulnerabilities in Adobe and Oracle software to its must-patch list after learning of active exploitation attempts. One of ...

The vulnerability abused by attackers in Adobe Coldfusion concerns the Apache BlazeDS library supplied with the program. This contains an “important” Java deserialization vulnerability (CVE ...

The Adobe ColdFusion flaw flagged by CISA is an old Java deserialization bug in the Apache BlazeDS library, which received a critical severity rating of CVSS 9.8 out of 10 because it enables ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) to its Known Exploited ...