| Package | Affected versions | Patched versions |
|---|---|---|
| blazeds | ≤ 4.0.1 | |
| livecycle | = 6.0= 7.0= 8.0.1= 8.0.1.1= 8.0.1.2= 8.2.1.3≤ 9.0.0.2 | |
| livecycle data services | = 2.5= 2.5.1= 2.6= 2.6.1= 3≤ 3.1 |
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free