CVE-2017-11286

Adobe ColdFusion has an XML external entity (XXE) injection vulnerability

published December 1, 2017

CVSS
—
EPSS
10%
Percentile
95.4
In the wild
Unconfirmed
What it is

Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09585 · 95.4th percentile
Published
2017-12-01T08:00Z
EPSS history
Timeline
  • 01 DEC 08:00Z
    Adobe ColdFusion has an XML external entity (XXE) injection vulnerability
    cvelistv5