Feb 24, 2025
2 new incidents, 0 with updates.
Started
- ClosedPatched
Adobe ColdFusion: ColdFusion Deserialization Vulnerability
Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution. Added to CISA KEV on 2025-02-24.
Adobe ColdFusionClosed Feb 24, 2025
- ClosedPatched
Oracle Agile Product Lifecycle Management (PLM): Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. Added to CISA KEV on 2025-02-24.
Oracle Agile Product Lifecycle Management (PLM)Closed Feb 24, 2025
