CVE-2017-11284

CRITICAL 9.8CVE-2017-11284 · Published 01/12/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
coldfusion adobe	`= 11.0= 2016`	No fix yet

Description

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

References

securityfocus.com/bid/100708 · Third Party Advisory
securitytracker.com/id/1039321 · Third Party Advisory
helpx.adobe.com/security/products/coldfusion/apsb17-30.html · Mitigation

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free