VULNERABILITY INTELLIGENCE

CVE-2009-3960

CVSS score6.5 MEDIUM
EPSS probability90.12%
CISA KEVKnown exploited vulnerability
Published2010-02-15
Last modified2026-08-06
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Known Exploited Vulnerability

Adobe BlazeDS Information Disclosure Vulnerability

Vendor / product: Adobe / BlazeDS

Description

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.

Primary references