CVE-2009-3960 | BDVDB-2026-40336 Detail
AdobeBlazeDS
Description#
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/38197
- http://securitytracker.com/id?1023584
- http://www.osvdb.org/62292
- http://secunia.com/advisories/38543
- https://www.exploit-db.com/exploits/41855/
- http://www.adobe.com/support/security/bulletins/apsb10-05.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3960
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.