CVE-2017-11284: Critical severity Adobe ColdFusion vulnerability
Published Dec 1, 2017
·Updated
Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
Affected Software
18 affected components
Adobe ColdFusion=11.0
Adobe ColdFusion=11.0-update1
Adobe ColdFusion=11.0-update10
Adobe ColdFusion=11.0-update11
Adobe ColdFusion=11.0-update12
Adobe ColdFusion=11.0-update2
Adobe ColdFusion=11.0-update3
Adobe ColdFusion=11.0-update4
Adobe ColdFusion=11.0-update5
Adobe ColdFusion=11.0-update6
Adobe ColdFusion=11.0-update7
Adobe ColdFusion=11.0-update8
Adobe ColdFusion=11.0-update9
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Remediation
Event History
Dec 1, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-11284?
CVE-2017-11284 has a severity rating of important, indicating that it poses a significant security risk.
2
How do I fix CVE-2017-11284?
To fix CVE-2017-11284, you need to upgrade to the latest version of Adobe ColdFusion which is not affected by this vulnerability.
3
What versions of Adobe ColdFusion are affected by CVE-2017-11284?
CVE-2017-11284 affects ColdFusion 2016 Update 4 and earlier, as well as ColdFusion 11 Update 12 and earlier.
4
What type of vulnerability is CVE-2017-11284?
CVE-2017-11284 is an Untrusted Data Deserialization vulnerability.
5
What could happen if I don't remediate CVE-2017-11284?
If not remediated, CVE-2017-11284 may allow an attacker to execute arbitrary code on the affected ColdFusion server.