CVE-2017-11283: Critical severity Adobe ColdFusion vulnerability
Published Dec 1, 2017
·Updated
Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
Affected Software
18 affected components
Adobe ColdFusion=11.0
Adobe ColdFusion=11.0-update1
Adobe ColdFusion=11.0-update10
Adobe ColdFusion=11.0-update11
Adobe ColdFusion=11.0-update12
Adobe ColdFusion=11.0-update2
Adobe ColdFusion=11.0-update3
Adobe ColdFusion=11.0-update4
Adobe ColdFusion=11.0-update5
Adobe ColdFusion=11.0-update6
Adobe ColdFusion=11.0-update7
Adobe ColdFusion=11.0-update8
Adobe ColdFusion=11.0-update9
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Remediation
Event History
Dec 1, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-11283?
CVE-2017-11283 is rated as critical due to its potential to allow an attacker to exploit the vulnerability and execute arbitrary code.
2
How do I fix CVE-2017-11283?
To fix CVE-2017-11283, upgrade to Adobe ColdFusion 2016 Update 5 or later, or ColdFusion 11 Update 13 or later.
3
What versions of Adobe ColdFusion are affected by CVE-2017-11283?
CVE-2017-11283 affects Adobe ColdFusion 2016 Update 4 and earlier, and ColdFusion 11 Update 12 and earlier.
4
What type of vulnerability is CVE-2017-11283?
CVE-2017-11283 is categorized as an Untrusted Data Deserialization vulnerability.
5
Can CVE-2017-11283 lead to data breaches?
Yes, CVE-2017-11283 can potentially lead to data breaches as it allows an attacker to execute arbitrary code.