CVE-2017-11283

🗓️ 01 Dec 2017 08:00:00Reported by adobeType

Adobe ColdFusion Untrusted Data Deserialization vulnerability CVE-2017-1128

Reporter	Title	Published	Views	Family All 13
Prion	Deserialization of untrusted data	1 Dec 201708:29	–	prion
Check Point Advisories	Adobe ColdFusion DataServicesCFProxy Insecure Deserialization (CVE-2017-11283)	27 Nov 201700:00	–	checkpoint_advisories
NVD	CVE-2017-11283	1 Dec 201708:29	–	nvd
CVE	CVE-2017-11283	1 Dec 201708:29	–	cve
seebug.org	Adobe ColdFusion Deserialization RCE (CVE-2017-11283, CVE-2017-11238)	18 Oct 201700:00	–	seebug
seebug.org	ColdFusion RCE(CVE-2018-4939)	19 Jun 201800:00	–	seebug
seebug.org	Adobe ColdFusion 反序列化漏洞（CVE-2017-3066）	30 Mar 201800:00	–	seebug
myhack58	Adobe ColdFusion arbitrary command execution flaws vulnerability 0day(CVE–2017–11283, CVE–2017–11284)early warning-vulnerability warning-the black bar safety net	19 Oct 201700:00	–	myhack58
OpenVAS	Adobe ColdFusion Multiple Vulnerabilities (APSB17-30)	14 Sep 201700:00	–	openvas
Tenable Nessus	Adobe ColdFusion 11.x < 11u13 / 2016.x < 2016u5 Multiple Vulnerabilities (APSB17-30)	13 Sep 201700:00	–	nessus

[
  {
    "product": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11."
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039321
helpx	www.helpx.adobe.com/security/products/coldfusion/apsb17-30.html
securityfocus	www.securityfocus.com/bid/100708

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Dec 2017 08:00Current

9.6High risk

Vulners AI Score9.6

EPSS0.346