CVE coverage
View on NVD →
CVE-2017-3066
CVSS 9.8
Actively exploited (KEV)
2 detections found
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET EXPLOIT Adobe Coldfusion BlazeDS Java Object Deserialization Remote Code Execution | rev 4 | 2024-04-06 |
| snort | ET EXPLOIT Adobe Coldfusion BlazeDS Java Object Deserialization Remote Code Execution | rev 2 | 2018-07-13 |