Looking to find info on vulnerable Cold Fusion and Adobe Flex but see no CVE content on either in Bigfix. This is major issue for many large organizations. Specifically, see this link announcing the new vulnerabilities that allow complete control of machines affected: www.us-cert.gov/ncas/current-activity/2015/04/15/Adobe-Releases-Security-Updates-Flash-Player-ColdFusion-and-Flex
Would like a custom report that looks for # of vulnerable systems for:
CVE-2015-1773 (Adobe Flex):
CVE-2015-0345 (Adobe Cold Fusion):
Looks like these are already covered as it’s Adobe Flash. CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0357, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3040, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043, CVE-2015-3044:
Lack of content to detect vulns in Cold Fusion in Bigfix is surprising given how many web servers are taken over across the internet for years now using Cold Fusion vulns.