CVE-2017-3066 Adobe ColdFusion
Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.
- CVSS
- not scored
On CISA’s exploited list
Adobe ColdFusion Deserialization Vulnerability
- Added
- 2025-02-24
- Federal patch deadline
- 2025-03-17
- Ransomware use
- not known