Vulnerabilities CVE-2009-3960

CVE-2009-3960

Medium

Open

KEV

TLP:CLEAR

Adobe BlazeDS Information Disclosure Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.

Details

EPSS Score ⓘ: 90.01%

99.8th percentile
Confidence: 100%
Published: Feb 15, 2010
Last Modified: Aug 6, 2026
CISA KEV
Date Added: Mar 7, 2022
Patch Due: Sep 7, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.