CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CVE-2009-3960

criticalknown exploitedpublic exploitcovered by 1 sourcefirst seen 2022-03-07
Actively exploited. CVE-2009-3960 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-03-07) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.
Public exploit code is available. Proof-of-concept or working exploit code for CVE-2009-3960 is indexed in Metasploit and Exploit-DB. Expect opportunistic scanning and exploitation attempts — prioritize remediation.
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.

CSIRTS triage

What
Adobe BlazeDS contains a vulnerability that allows for information disclosure.
Who is affected
Deployments of Adobe BlazeDS that have not been updated.
Urgency
Remediation is urgent as the vulnerability is actively exploited and critical.
Action
Apply the latest updates from Adobe.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2009-3960

Get an email if CVE-2009-3960 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Exploit availability

Public exploit or proof-of-concept code for CVE-2009-3960 is indexed in these free datasets. Available exploit code raises real-world risk independent of the CVSS score.

Advisory coverage (1)

External references

NVD record for CVE-2009-3960

CVE.org record

CISA KEV catalog

Embed the live status

CVE-2009-3960 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2009-3960 status](https://www.csirts.com/badge/CVE-2009-3960)](https://www.csirts.com/cve/CVE-2009-3960)