Adobe patches flaw in LiveCycle Data Services

News by Doug Olenick

Adobe released a hotfix for LiveCycle Data Services, patching a vulnerability that could result in information being disclosed.

A hotfix released by Adobe on Tuesday addresses a vulnerability (CVE-2015-3269) in LiveCycle Data Services that could lead to information being disclosed.

The updated versions are,,, and for Windows, Macintosh and Unix. Adobe rates the fix as a priority 3 update, which means the company recommends administrators install the update at their discretion. Priority 1 and 2 rated patches require faster action.

The vulnerability is associated with parsing crafted XML entities, which could lead to information being disclosed, Adobe said on its site.

“We are not currently aware of any reports of this vulnerability being exploited,” Adobe spokesperson Erika Strong told Tuesday in an email correspondence. “This issue was responsibly disclosed to Adobe.”

Adobe credited Matthias Kaiser of Code White for bringing the issue to the company's attention.

Find this article useful?

Get more great articles like this in your inbox every lunchtime

Video and interviews