Adobe Livecycle Data Services — known CVE vulnerabilities

Every CVE whose affected-product data names Adobe Livecycle Data Services, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2011-2092 — CVSS 10.0 (critical): Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict…
• CVE-2009-3960 — CVSS 6.5 (medium) — actively exploited: Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and…
• CVE-2011-2093 — CVSS 5.0 (medium): Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object…
• CVE-2015-3269 — CVSS 5.0 (medium): Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before…
• CVE-2015-5255 — CVSS 4.3 (medium): Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175…