Adobe.ColdFusion.XmlTransform.Improper.Input.Validation

Description

This indicates an attack attempt against an Information Disclosure vulnerability in Adobe ColdFusion.
The vulnerability is due to insufficient sanitizing when using the ColdFusion XmlTranform() function. A remote attacker can exploit this to gain unauthorized access to sensitive information.

Affected Products

Adobe ColdFusion 2017.011.30161

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Apply the latest update from the vendor.
https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html

References