Patched ColdFusion Flaw Exposes Applications to Attack

Adobe pushed hotfixes to ColdFusion 11 and 10 installations addressing a XXE vulnerability that can be exploited processing OOXML documents.
Source: Threatpost