CVE-2017-11283

Critical

Published: 01/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover of the application.

Recommendation

It is recommended to update to the latest version of ColdFusion to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.