Published: 15/02/2010 Updated: 16/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 470

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Unspecified vulnerability in BlazeDS 3.2 and previous versions, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote malicious users to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe lifecycle data services 3.0
adobe flex data services 2.0.1
adobe lifecycle data services 2.5.1
adobe lifecycle data services 2.6.1
adobe coldfusion 9.0
adobe lifecycle 8.2.1
adobe lifecycle 9.0
adobe coldfusion 8.0.1
adobe blazeds
adobe lifecycle 8.0.1
adobe coldfusion 7.0.2
adobe coldfusion 8.0

Security-Assessmentcom discovered that multiple Adobe products with different Data Services versions are vulnerable to XML External Entity (XXE) and XML injection attacks ...

( , ) (, `' ) (' ', ) , (' ( ) ( (_,) `), ) _ _, / _____/ / _ \ ____ ____ _____ \____ \==/ /_\ \ _/ ___\/ _ \ / \ / \/ | \\ \__( <_> ) Y Y \ /______ /\___|__ / \___ >____/|__|_| / \/ \/- \/ \/:wq (x0) ...

#!/bin/bash # # Exploit Title: Adobe XML Injection file content disclosure # Date: 07-04-2017 # Exploit Author: Thomas Sluyter # Website: wwwkilalanl # Vendor Homepage: wwwadobecom/support/security/bulletins/apsb10-05html # Version: Multiple Adobe products # Tested on: Windows Server 2003, ColdFusion 80 Enterprise # CVE : 2009- ...

NVD-CWE-noinfo http://securitytracker.com/id?1023584 http://www.securityfocus.com/bid/38197 http://www.osvdb.org/62292 http://www.adobe.com/support/security/bulletins/apsb10-05.html http://secunia.com/advisories/38543 https://www.exploit-db.com/exploits/41855/https://nvd.nist.gov https://packetstormsecurity.com/files/86558/Adobe-Products-XML-External-Entity-And-XML-Injection.html https://www.exploit-db.com/exploits/11529/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-3960

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect