CyberSec.Space Logo
Back to CVE Browser

CVE-2017-3066

Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score58.5850%
EPSS Percentile93.09th
PublishedApr 27, 2017
Last ModifiedApr 22, 2026

Vulnerability Description

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.

Affected Platforms (CPE)

📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 10.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 11.0
📦
Adobe

Coldfusion

= 2016
📦
Adobe

Coldfusion

= 2016
📦
Adobe

Coldfusion

= 2016
📦
Adobe

Coldfusion

= 2016

References & Advisories

🔗 http://www.securityfocus.com/bid/98003
🔗 http://www.securitytracker.com/id/1038364
🔗 https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html
🔗 https://www.exploit-db.com/exploits/43993/
🔗 http://www.securityfocus.com/bid/98003
🔗 http://www.securitytracker.com/id/1038364
🔗 https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html
🔗 https://www.exploit-db.com/exploits/43993/

Related Vulnerabilities

CVE-2001-151410.0

ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly...

CVE-2010-529010.0

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash...

CVE-1999-076010.0

Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional p...

CVE-2013-138910.0

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 11, 9.0.1 before Update 10, 9.0.2 before Update 5, and 10 before U...