CVE-2011-2093: Adobe BlazeDS

Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days.

Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability."

Affected products

• Adobe BlazeDS: up to and including 4.0.1
• Adobe Livecycle: up to and including 9.0.0.2; version 6.0 only; version 7.0 only; version 8.0.1 only; version 8.0.1.1 only; version 8.0.1.2 only; …
• Adobe Livecycle Data Services: up to and including 3.1; version 2.5 only; version 2.5.1 only; version 2.6 only; version 2.6.1 only; version 3 only

Published 2011-06-16. Last modified 2026-06-16.