CVE-2017-11286 - Vulnerability Details

Vendors	Products
Adobe	Coldfusion

Link	Providers
http://www.securityfocus.com/bid/100715
http://www.securitytracker.com/id/1039321
https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.", "vendor": "n/a", "versions": [{"status": "affected", "version": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11."}]}], "datePublic": "2017-11-30T00:00:00", "descriptions": [{"lang": "en", "value": "Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."}], "problemTypes": [{"descriptions": [{"description": "XML External Entity (XXE) Injection", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-12-01T10:57:01", "orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html"}, {"name": "100715", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/100715"}, {"name": "1039321", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1039321"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@adobe.com", "ID": "CVE-2017-11286", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.", "version": {"version_data": [{"version_value": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11."}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "XML External Entity (XXE) Injection"}]}]}, "references": {"reference_data": [{"name": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html", "refsource": "CONFIRM", "url": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html"}, {"name": "100715", "refsource": "BID", "url": "http://www.securityfocus.com/bid/100715"}, {"name": "1039321", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039321"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T18:05:29.964Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html"}, {"name": "100715", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/100715"}, {"name": "1039321", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1039321"}]}]}, "cveMetadata": {"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "assignerShortName": "adobe", "cveId": "CVE-2017-11286", "datePublished": "2017-12-01T08:00:00", "dateReserved": "2017-07-13T00:00:00", "dateUpdated": "2024-08-05T18:05:29.964Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (string)

}

]

}

]

datePublic : 2017-11-30T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : XML External Entity (XXE) Injection (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-12-01T10:57:01 (string)

orgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

shortName : adobe (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html (string)

}

1 : { »

name : 100715 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/100715 (string)

}

2 : { »

name : 1039321 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1039321 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@adobe.com (string)

ID : CVE-2017-11286 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (string)

version : { »

version_data : [ »

0 : { »

version_value : Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : XML External Entity (XXE) Injection (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html (string)

refsource : CONFIRM (string)

url : https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html (string)

}

1 : { »

name : 100715 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/100715 (string)

}

2 : { »

name : 1039321 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1039321 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T18:05:29.964Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html (string)

}

1 : { »

name : 100715 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/100715 (string)

}

2 : { »

name : 1039321 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1039321 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

assignerShortName : adobe (string)

cveId : CVE-2017-11286 (string)

datePublished : 2017-12-01T08:00:00 (string)

dateReserved : 2017-07-13T00:00:00 (string)

dateUpdated : 2024-08-05T18:05:29.964Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*", "matchCriteriaId": "E217CE63-07DC-4A88-8877-181F33A21C20", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*", "matchCriteriaId": "7D4BD25E-6856-40EC-98A8-ACB540992487", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*", "matchCriteriaId": "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*", "matchCriteriaId": "AFE18FEA-271A-42FE-8C24-19731DEB5444", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:*", "matchCriteriaId": "15F7DCF1-D9F2-45C0-B089-E37C91579729", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*", "matchCriteriaId": "82F81CF8-1482-4731-AD34-677B8D6B930B", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*", "matchCriteriaId": "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*", "matchCriteriaId": "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*", "matchCriteriaId": "96C50CD1-CE75-4D70-AD65-2DB6027D806A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*", "matchCriteriaId": "AE1B1190-4699-4FB0-AD46-DF0233B5BA90", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*", "matchCriteriaId": "827CB550-5078-4FD5-8B1F-616C06912AD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*", "matchCriteriaId": "31F22450-F26C-4797-9292-66CA444C0D2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*", "matchCriteriaId": "72450205-B4F4-4B44-9991-F4876D829BBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*", "matchCriteriaId": "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*", "matchCriteriaId": "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*", "matchCriteriaId": "12BAE66C-A745-4661-B5BB-7FC2C169CC82", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*", "matchCriteriaId": "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*", "matchCriteriaId": "D7446D70-D616-4EC1-BC64-41CDE56EFEAE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."}, {"lang": "es", "value": "Adobe ColdFusion tiene una vulnerabilidad de inyecci\u00f3n de XEE (XML External Entity). Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11."}], "id": "CVE-2017-11286", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-12-01T08:29:00.420", "references": [{"source": "psirt@adobe.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100715"}, {"source": "psirt@adobe.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1039321"}, {"source": "psirt@adobe.com", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100715"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1039321"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-611"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:* (string)

matchCriteriaId : E217CE63-07DC-4A88-8877-181F33A21C20 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:* (string)

matchCriteriaId : 7D4BD25E-6856-40EC-98A8-ACB540992487 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:* (string)

matchCriteriaId : 2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:* (string)

matchCriteriaId : AFE18FEA-271A-42FE-8C24-19731DEB5444 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:* (string)

matchCriteriaId : 15F7DCF1-D9F2-45C0-B089-E37C91579729 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:* (string)

matchCriteriaId : 82F81CF8-1482-4731-AD34-677B8D6B930B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:* (string)

matchCriteriaId : 57BBBE71-BBE0-4129-B997-3F9AF54BFBD8 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:* (string)

matchCriteriaId : 8E514D95-9287-4A43-9A44-BD6F8EDC5DA8 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:* (string)

matchCriteriaId : 96C50CD1-CE75-4D70-AD65-2DB6027D806A (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:* (string)

matchCriteriaId : AE1B1190-4699-4FB0-AD46-DF0233B5BA90 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:* (string)

matchCriteriaId : 827CB550-5078-4FD5-8B1F-616C06912AD9 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:* (string)

matchCriteriaId : 31F22450-F26C-4797-9292-66CA444C0D2C (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:* (string)

matchCriteriaId : 72450205-B4F4-4B44-9991-F4876D829BBD (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:* (string)

matchCriteriaId : B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:* (string)

matchCriteriaId : 9F3D7C8E-6695-44DF-AC9A-1AE09C46C529 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:* (string)

matchCriteriaId : 12BAE66C-A745-4661-B5BB-7FC2C169CC82 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:* (string)

matchCriteriaId : E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:* (string)

matchCriteriaId : D7446D70-D616-4EC1-BC64-41CDE56EFEAE (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11. (string)

}

1 : { »

lang : es (string)

value : Adobe ColdFusion tiene una vulnerabilidad de inyección de XEE (XML External Entity). Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11. (string)

}

]

id : CVE-2017-11286 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-12-01T08:29:00.420 (string)

references : [ »

0 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/100715 (string)

}

1 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1039321 (string)

}

2 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Mitigation (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/100715 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1039321 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html (string)

}

]

sourceIdentifier : psirt@adobe.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-611 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object