Adobe LiveCycle Data Services 3.1 and previous versions, LiveCycle 9.0.0.2 and previous versions, and BlazeDS 4.0.1 and previous versions do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows malicious users to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
adobe blazeds |
||
adobe livecycle data services 2.6.1 |
||
adobe livecycle data services 2.6 |
||
adobe livecycle data services |
||
adobe livecycle data services 3 |
||
adobe livecycle data services 2.5.1 |
||
adobe livecycle data services 2.5 |
||
adobe livecycle 6.0 |
||
adobe livecycle 8.0.1 |
||
adobe livecycle 8.0.1.1 |
||
adobe livecycle 8.0.1.2 |
||
adobe livecycle |
||
adobe livecycle 8.2.1.3 |
||
adobe livecycle 7.0 |
Vulmon