CVE-2017-11285
Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
Date published : 2017-12-01
http://www.securityfocus.com/bid/100711
https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html