CVE-2009-3960
Medium · 6.5 CISA KEV · ransomwareCVSS
6.5
EPSS
90.1%
Published
Feb 15, 2010
CISA due date
Sep 7, 2022
The record
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|