Skip to content

Known vulnerabilities in n/a Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.

Is your version affected?

CVE Summary Score Published
CVE-2017-11286 Adobe ColdFusion has an XML external entity (XXE) injection vulnerability Not rated Dec 1, 2017
CVE-2017-11285 Adobe ColdFusion has a cross-site scripting (XSS) vulnerability Not rated Dec 1, 2017
CVE-2017-11284 Adobe ColdFusion has an Untrusted Data Deserialization vulnerability Not rated Dec 1, 2017
CVE-2017-11283 Adobe ColdFusion has an Untrusted Data Deserialization vulnerability Not rated Dec 1, 2017

Other n/a products