« Volver al listado

CVE-2017-11283

Estado: ModificadaCrítica (9.8)—

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adobe — Coldfusion

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-11283",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.",
          "versions": [
            {
              "status": "affected",
              "version": "Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11."
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-12-01T08:29:00.293",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/100708",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1039321",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/100708",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1039321",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11."
    },
    {
      "lang": "es",
      "value": "Adobe ColdFusion tiene una vulnerabilidad de deserialización de datos no fiables. Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11."
    }
  ],
  "lastModified": "2026-06-17T01:01:32.997",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E217CE63-07DC-4A88-8877-181F33A21C20"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D4BD25E-6856-40EC-98A8-ACB540992487"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFE18FEA-271A-42FE-8C24-19731DEB5444"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15F7DCF1-D9F2-45C0-B089-E37C91579729"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82F81CF8-1482-4731-AD34-677B8D6B930B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96C50CD1-CE75-4D70-AD65-2DB6027D806A"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE1B1190-4699-4FB0-AD46-DF0233B5BA90"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "827CB550-5078-4FD5-8B1F-616C06912AD9"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31F22450-F26C-4797-9292-66CA444C0D2C"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72450205-B4F4-4B44-9991-F4876D829BBD"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7446D70-D616-4EC1-BC64-41CDE56EFEAE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@adobe.com"
}