Adobe LiveCycle Data Services 4.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:livecycle_data_services:4.7:*:*:*:*:*:*:*

part: a version: 4.7 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductLivecycle Data Services (17401425-3e90-5d96-9af0-f1dfa7500a92)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5255 vulnerable 2026-06-08 05:06:49.364108 Details available
Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to intranet servers via a crafted XML document, related to a Server-Side Request Forgery (SSRF) issue.
Published: 2015-11-18T21:00:00.000Z
Updated: 2024-08-06T06:41:08.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3269 vulnerable 2026-06-08 05:06:37.848435 Details available
Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.354169, 4.6.2 before 4.6.2.354169, and 4.7 before 4.7.0.354169 and other products, allows remote attackers to read arbitrary files via an AMF message containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2015-08-25T01:00:00.000Z
Updated: 2024-08-06T05:39:32.110Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.