CVE:CVE-2009-3960
CNNVD:CNNVD-201002-143
BlazeDS被用在LiveCycle、LiveCycle Data Services、Flex Data Services和ColdFusion中时存在未明安全漏洞，远程攻击者通过与远程请求相关的向量可以获得敏感信息，该漏洞与注入标签和XML文件中外部实体参考相关。
solution:Upgrade adobe blazeds to a higher version than 3.2,and avoid the version (,3.2]; Upgrade adobe coldfusion to a higher version than 7.0.2,8.0,8.0.1,9.0,and avoid the version 7.0.2,8.0,8.0.1,9.0; Upgrade adobe flex_data_services to a higher version than 2.0.1,and avoid the version 2.0.1; Upgrade adobe lifecycle to a higher version than 8.0.1,8.2.1,9.0,and avoid the version 8.0.1,8.2.1,9.0; Upgrade adobe lifecycle_data_services to a higher version than 2.5.1,2.6.1,3.0,and avoid the version 2.5.1,2.6.1,3.0