Veille CVE
CVE-2009-3960
6.5 Moyenne Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Adobe BlazeDS Information Disclosure Vulnerability
Ajoutée le 07/03/2022 · Échéance de correction (agences US) : 07/09/2022
Action requise : Apply updates per vendor instructions.
Description
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 6.5 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| 3.1 | 6.5 Moyenne | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| 2.0 | 4.3 Moyenne | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Références
- http://secunia.com/advisories/38543 Broken Link
- http://securitytracker.com/id?1023584 Broken LinkThird Party AdvisoryVDB Entry
- http://www.adobe.com/support/security/bulletins/apsb10-05.html Not ApplicableVendor Advisory
- http://www.osvdb.org/62292 Broken Link
- http://www.securityfocus.com/bid/38197 Broken LinkThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/41855/ ExploitThird Party AdvisoryVDB Entry
- http://secunia.com/advisories/38543 Broken Link
- http://securitytracker.com/id?1023584 Broken LinkThird Party AdvisoryVDB Entry
- http://www.adobe.com/support/security/bulletins/apsb10-05.html Not ApplicableVendor Advisory
- http://www.osvdb.org/62292 Broken Link
- http://www.securityfocus.com/bid/38197 Broken LinkThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/41855/ ExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3960 US Government Resource