CVE-2016-4264

HIGH

Adobe ColdFusion <11-Update 10 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-4264. PoCs published by Dawid Golunski.

AI-analyzed exploit summary This exploit demonstrates an XXE (XML External Entity) injection vulnerability in Adobe ColdFusion <= 11, allowing arbitrary file reading and directory listing via a crafted OOXML document. It includes a Python script to generate a malicious spreadsheet and set up listeners to exfiltrate data.

Description

The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dawid Golunski · pythonwebappsmultiple
https://www.exploit-db.com/exploits/40346

This exploit demonstrates an XXE (XML External Entity) injection vulnerability in Adobe ColdFusion <= 11, allowing arbitrary file reading and directory listing via a crafted OOXML document. It includes a Python script to generate a malicious spreadsheet and set up listeners to exfiltrate data.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Adobe ColdFusion <= 11
No auth needed
Prerequisites: External IP address for callback · Ability to upload or supply a malicious OOXML document to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/40346/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036708
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/539374/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92684

Scores

CVSS v3 8.6
EPSS 0.6904
EPSS Percentile 99.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

CWE
CWE-611
Status published
Products (2)
adobe/coldfusion < 10.0
adobe/coldfusion < 11.0
Published Sep 01, 2016
Tracked Since Feb 18, 2026