Skip to content
Sign in
Not rated

CVE-2017-11286 Adobe ColdFusion has an XML external entity (XXE) injection vulnerability

Description

Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

Affected products and versions

Product Affected versions Fixed in
Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. Versions not published

Other CVEs of Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.

The 4 CVEs of Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. →
CVE-2017-11283 Adobe ColdFusion has an Untrusted Data Deserialization vulnerability Not rated CVE-2017-11284 Adobe ColdFusion has an Untrusted Data Deserialization vulnerability Not rated CVE-2017-11285 Adobe ColdFusion has a cross-site scripting (XSS) vulnerability Not rated
Track this CVE