{"cvss":9.8,"datePublished":"2025-02-24","dateUpdated":"2025-02-24","description":"Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.","dueDate":"2025-03-17","id":"CVE-2017-3066","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html ; https://nvd.nist.gov/vuln/detail/CVE-2017-3066","product":"ColdFusion","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Adobe ColdFusion Deserialization Vulnerability","vendor":"Adobe"}