vulnwire
8.6high

CVE-2016-4264in critical feed1 exploit

The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitra…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
8.6
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
69.0%
percentile 99%
Public exploits
1
Exploit-DB

The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Exploit prediction (EPSS)

69.04% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-40346 Adobe ColdFusion < 11 Update 10 - XML External Entity Injection · webapps · 2016-09-07

CVSS scores

Assigned byVersionScoreVector
NVD3.08.6CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
NVD2.06.4AV:N/AC:L/Au:N/C:P/I:P/A:N

Classification

Weakness
  • CWE-611 Improper Restriction of XML External Entity Reference

References

  • exploit-db.com /exploits/40346/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securitytracker.com /id/1036708 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /archive/1/539374/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • legalhackers.com /advisories/Adobe-ColdFusion-11-XXE-Exploit-CVE-2016-4264.txt · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/92684 · vdb-entry, x_refsource_BID, x_transferred
  • helpx.adobe.com /security/products/coldfusion/apsb16-30.html · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.