CVE-2009-3960CISA KEVEPSS p99.8%

CVE-2009-3960Adobe BlazeDS Information Disclosure Vulnerability

Adobe / BlazeDS

Description

Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.

Scoring

CVSS 6.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS90.01% probability of exploitation · percentile 99.8% · 2026-07-29T12:03:07Z
Last modified2026-08-01

CISA KEV entry

Added to KEV: 2022-03-07

(incoming)1

TypeTargetConfidenceTier
KEVEntryAdobe BlazeDS Information Disclosure Vulnerabilitykev-cve-2009-39600%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Adobe ColdFusion Information Disclosure Vulnerability
CVE
Adobe ColdFusion Deserialization Vulnerability
CVE
Adobe ColdFusion Improper Access Control Vulnerability
CVE
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
CVE
Adobe ColdFusion Unrestricted File Upload Vulnerability
CVE
Adobe ColdFusion Directory Traversal Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.