VULNERABILITY INTELLIGENCE

CVE-2011-2092

CVSS score10 HIGH
EPSS probability6.06%
CISA KEVNot currently listed
Published2011-06-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references