CVE-2009-3960

🗓️ 15 Feb 2010 18:00:00Reported by adobeType

cve🔗 web.nvd.nist.gov👁 1178 Views🌐 WEB

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents

Reporter	Title	Published	Views	Family All 35
zdt	Adobe Products XML External Entity And XML Injection Vulnerabilities	22 Feb 201000:00	–	zdt
zdt	Adobe Multiple Products - XML Injection File Content Disclosure Exploit	11 Apr 201700:00	–	zdt
Tenable Nessus	Multiple Adobe Products XML External Entity (XXE) Injection (APSB10-05)	1 Mar 201000:00	–	nessus
attackerkb	CVE-2009-3960	15 Feb 201000:00	–	attackerkb
BDU FSTEC	The vulnerability of the BlazeDS component of the ColdFusion software platform allows a perpetrator to gain unauthorized access to protected information.	8 Feb 202300:00	–	bdu_fstec
Circl	CVE-2009-3960	22 Feb 201000:00	–	circl
CISA KEV Catalog	Adobe BlazeDS Information Disclosure Vulnerability	7 Mar 202200:00	–	cisa_kev
CISA	CISA Adds 11 Known Exploited Vulnerabilities to Catalog	7 Mar 202200:00	–	cisa
CISA	CISA and Partners Release Advisory on Ghost (Cring) Ransomware	19 Feb 202512:00	–	cisa
Check Point Advisories	Adobe BlazeDS XML Processing Information Disclosure (APSB10-05; CVE-2009-3960)	14 Feb 201000:00	–	checkpoint_advisories

NVD

Node

adobe blazedsRange≤3.2

adobe coldfusionMatch7.0.2

adobe coldfusionMatch8.0

adobe coldfusionMatch8.0.1

adobe coldfusionMatch9.0

adobe flex_data_servicesMatch2.0.1

adobe livecycleMatch8.0.1

adobe livecycleMatch8.2.1

adobe livecycleMatch9.0

adobe livecycle_data_servicesMatch2.5.1

adobe livecycle_data_servicesMatch2.6.1

adobe livecycle_data_servicesMatch3.0

Source	Link
securitytracker	www.securitytracker.com/id
secunia	www.secunia.com/advisories/38543
securityfocus	www.securityfocus.com/bid/38197
osvdb	www.osvdb.org/62292
adobe	www.adobe.com/support/security/bulletins/apsb10-05.html
exploit-db	www.exploit-db.com/exploits/41855/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
responseURI	request body	/{context.root}/messagebroker/http	XML External Entity injection via BlazeDS HTTPChannel (AMFX payload) enabling local file disclosure/in XML injection.	CWE-611, CWE-91
targetURI	request body	/{context.root}/messagebroker/http	XML External Entity injection via BlazeDS HTTPChannel (AMFX payload) enabling local file disclosure/in XML injection.	CWE-611, CWE-91
responseURI	request body	/{context.root}/messagebroker/httpsecure	XML External Entity injection via BlazeDS over HTTPS HTTPChannel.	CWE-611, CWE-91
targetURI	request body	/{context.root}/messagebroker/httpsecure	XML External Entity injection via BlazeDS over HTTPS HTTPChannel.	CWE-611, CWE-91
responseURI	request body	/{context.root}/flex2gateway/http	XML External Entity injection via Flex/ColdFusion gateway endpoint.	CWE-611, CWE-91
targetURI	request body	/{context.root}/flex2gateway/http	XML External Entity injection via Flex/ColdFusion gateway endpoint.	CWE-611, CWE-91
responseURI	request body	/{context.root}/flex2gateway/httpsecure	XML External Entity injection via Flex/ColdFusion gateway over HTTPS.	CWE-611, CWE-91
targetURI	request body	/{context.root}/flex2gateway/httpsecure	XML External Entity injection via Flex/ColdFusion gateway over HTTPS.	CWE-611, CWE-91
responseURI	request body	/samples/messagebroker/http	PoC endpoint path used in BlazeDS XML External Entity/Injections.	CWE-611, CWE-91
targetURI	request body	/samples/messagebroker/http	PoC endpoint path used in BlazeDS XML External Entity/Injections.	CWE-611, CWE-91

06 Aug 2026 05:16Current

8.8High risk

Vulners AI Score8.8

CVSS 24.3

CVSS 3.16.5

EPSS0.90118

SSVC

In Wild