vulnerability
APSB17-14: Security updates available for ColdFusion (CVE-2017-3066)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Apr 27, 2017 | Jun 21, 2019 | Aug 11, 2025 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 27, 2017
Added
Jun 21, 2019
Modified
Aug 11, 2025
Description
Adobe has released security hotfixes for ColdFusion versions 10, 11 and the 2016 release. These hotfixes resolve an input validation issue that could be used in reflected XSS (cross-site scripting) attacks (CVE-2017-3008). These hotfixes also include an updated version of Apache BlazeDS to mitigate java deserialization (CVE-2017-3066).
Solutions
adobe-coldfusion-10-update-23adobe-coldfusion-11-update-12adobe-coldfusion-2016-release-update-4
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.