CVE-2009-3960
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
CISA Known Exploited Vulnerability
Vendor / Product
Adobe — BlazeDS
Date Added
2022-03-07
Remediation Due
2022-09-07
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2009-3960
Affected Software (12)
| Vendor | Product | Version |
|---|---|---|
| adobe | blazeds | < 3.2 |
| adobe | coldfusion | 7.0.2 |
| adobe | coldfusion | 8.0 |
| adobe | coldfusion | 8.0.1 |
| adobe | coldfusion | 9.0 |
| adobe | flex_data_services | 2.0.1 |
| adobe | livecycle | 8.0.1 |
| adobe | livecycle | 8.2.1 |
| adobe | livecycle | 9.0 |
| adobe | livecycle_data_services | 2.5.1 |
| adobe | livecycle_data_services | 2.6.1 |
| adobe | livecycle_data_services | 3.0 |
References & Advisories (7)
US Government Resource
Not Applicable
Vendor Advisory
Exploit
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Broken Link