Security Adobe ColdFusion 11 XML External Entity Injection September 7, 2016 007admin Adobe ColdFusion versions 11 and below suffer from an XML external entity (XXE) injection vulnerability.