Lucene search
HistoryJun 16, 2011 - 11:55 p.m.
CVE-2011-2093
adobe
livecycle
data services
blazeds
complex object graph
vulnerability
denial of service
cve-2011-2093
nvd
6.7 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.005 Low
EPSS
Percentile
77.2%
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a “complex object graph vulnerability.”
Affected configurations
Node
adobeblazedsRange≤4.0.1
Node
adobelivecycle_data_servicesRange≤3.1
ORadobelivecycle_data_servicesMatch2.5
ORadobelivecycle_data_servicesMatch2.5.1
ORadobelivecycle_data_servicesMatch2.6
ORadobelivecycle_data_servicesMatch2.6.1
ORadobelivecycle_data_servicesMatch3
Node
adobelivecycleRange≤9.0.0.2
ORadobelivecycleMatch6.0
ORadobelivecycleMatch7.0
ORadobelivecycleMatch8.0.1
ORadobelivecycleMatch8.0.1.1
ORadobelivecycleMatch8.0.1.2
ORadobelivecycleMatch8.2.1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| adobe:blazeds | adobe blazeds | le | 4.0.1 |
Related
nvd
nvd
CVE-2011-2093
2011-06-16 23:55:01
prion
prion
Design/Logic Flaw
2011-06-16 23:55:00
cvelist
cvelist
CVE-2011-2093
2011-06-16 23:00:00
nessus
nessus
HP Systems Insight Manager < 7.0 Multiple Vulnerabilities
2012-06-15 00:00:00
6.7 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.005 Low
EPSS
Percentile
77.2%
Related for CVE-2011-2093