Security News > 2021 > March > Adobe Patches Critical ColdFusion Security Flaw
2021-03-22 15:06
Adobe has released an urgent patch for a potentially dangerous security vulnerability in Adobe ColdFusion, the platform used for building and deploying mobile and web apps.
"These updates resolve a critical vulnerability that could lead to arbitrary code execution," Adobe said in an advisory.
The security updates are available for ColdFusion versions 2021, 2016 and 2018.
The company recommends that users update the ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11.
"Applying the ColdFusion update without a corresponding JDK update will NOT secure the server," Adobe warned.
The company also published security configuration settings and lockdown guides for ColdFusion deployments.
News URL
Related news
- Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities (source)
- Critical security hole in Apache Struts under exploit (source)
- Adobe warns of critical ColdFusion bug with PoC exploit code (source)
- The ongoing evolution of the CIS Critical Security Controls (source)
- Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution (source)