Adobe Livecycle vulnerabilities
5 known vulnerabilities affecting adobe/livecycle.
Total CVEs
5
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2016-6934MEDIUMCVSS 6.1v10.0.4v11.0.12016-12-15
CVE-2016-6934 [MEDIUM] CWE-79 CVE-2016-6934: Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an
Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that could be used in cross-site scripting attacks.
nvd
CVE-2016-6933MEDIUMCVSS 6.1v10.0.4v11.0.12016-12-15
CVE-2016-6933 [MEDIUM] CWE-79 CVE-2016-6933: Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an
Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.
nvd
CVE-2011-2092CRITICALCVSS 10.0≤ 9.0.0.2v6.0+5 more2011-06-16
CVE-2011-2092 [CRITICAL] CWE-20 CVE-2011-2092: Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability."
nvd
CVE-2011-2093MEDIUMCVSS 5.0≤ 9.0.0.2v6.0+5 more2011-06-16
CVE-2011-2093 [MEDIUM] CWE-20 CVE-2011-2093: Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability."
nvd
CVE-2009-3960MEDIUMCVSS 6.5KEVPoCv8.0.1v8.2.1+1 more2010-02-15
CVE-2009-3960 [MEDIUM] CVE-2009-3960: Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, Li
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external e
nvd