CVE-2017-11284 Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
CriticalCVSS 9.8
EPSS 42.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe coldfusion | = 11.0 | No fix listed |
| Adobe coldfusion | = 11.0-update1 | No fix listed |
| Adobe coldfusion | = 11.0-update10 | No fix listed |
| Adobe coldfusion | = 11.0-update11 | No fix listed |
| Adobe coldfusion | = 11.0-update12 | No fix listed |
| Adobe coldfusion | = 11.0-update2 | No fix listed |
| Adobe coldfusion | = 11.0-update3 | No fix listed |
| Adobe coldfusion | = 11.0-update4 | No fix listed |
| Adobe coldfusion | = 11.0-update5 | No fix listed |
| Adobe coldfusion | = 11.0-update6 | No fix listed |
| Adobe coldfusion | = 11.0-update7 | No fix listed |
| Adobe coldfusion | = 11.0-update8 | No fix listed |
| Adobe coldfusion | = 11.0-update9 | No fix listed |
| Adobe coldfusion | = 2016 | No fix listed |
| Adobe coldfusion | = 2016-update1 | No fix listed |
| Adobe coldfusion | = 2016-update2 | No fix listed |
| Adobe coldfusion | = 2016-update3 | No fix listed |
| Adobe coldfusion | = 2016-update4 | No fix listed |
References
- 100708 third-party-advisory vdb-entry
- 1039321 third-party-advisory vdb-entry
- helpx.adobe.com mitigation patch vendor-advisory