CVE-2017-11284

critical · 9.8

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

9.8

CVSS

42.7%

EPSS (exploit prob.)

99th

EPSS percentile

2017-12-01

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

Affected products

Vendor	Product	Affected versions
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	11.0
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016
adobe	coldfusion	2016

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/100708
http://www.securitytracker.com/id/1039321
https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html
http://www.securityfocus.com/bid/100708
http://www.securitytracker.com/id/1039321
https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-11284