Security Advisory
CVE-2017-11286
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.