CVE-2017-3066

Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.