CVE-2009-3960

2010-02-1518:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

870

In Wild

cve-2009-3960

unspecified vulnerability

blazeds

livecycle

data services

flex data services

coldfusion

remote attackers

sensitive information

xml documents

security vulnerability

8.8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.968 High

EPSS

Percentile

99.7%

JSON

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.

CPENameOperatorVersion
adobe:lifecycleadobe lifecycleeq9.0
adobe:coldfusionadobe coldfusioneq7.0.2
adobe:coldfusionadobe coldfusioneq8.0
adobe:coldfusionadobe coldfusioneq9.0
adobe:blazedsadobe blazedsle3.2
adobe:lifecycle_data_servicesadobe lifecycle data serviceseq3.0
adobe:lifecycleadobe lifecycleeq8.2.1
adobe:flex_data_servicesadobe flex data serviceseq2.0.1
adobe:lifecycle_data_servicesadobe lifecycle data serviceseq2.6.1
adobe:lifecycleadobe lifecycleeq8.0.1

CPE	Name	Operator	Version
adobe:lifecycle	adobe lifecycle	eq	9.0
adobe:coldfusion	adobe coldfusion	eq	7.0.2
adobe:coldfusion	adobe coldfusion	eq	8.0
adobe:coldfusion	adobe coldfusion	eq	9.0
adobe:blazeds	adobe blazeds	le	3.2
adobe:lifecycle_data_services	adobe lifecycle data services	eq	3.0
adobe:lifecycle	adobe lifecycle	eq	8.2.1
adobe:flex_data_services	adobe flex data services	eq	2.0.1
adobe:lifecycle_data_services	adobe lifecycle data services	eq	2.6.1
adobe:lifecycle	adobe lifecycle	eq	8.0.1