Patched ColdFusion Flaw Exposes Applications to Attack Adobe pushed hotfixes to ColdFusion 11 and 10 installations addressing a XXE vulnerability that can be exploited processing OOXML documents. Source: Threatpost