STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must have Event Gateway Services disabled when not in use.

DISA Rule

SV-279041r1171343_rule

Vulnerability Number

V-279041

Group Title

SRG-APP-000141-AS-000095

Rule Version

APAS-CF-000195

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure Event Gateway Service.

1. From the Admin Console Landing Screen, navigate to Event Gateways >> Settings.

2. Uncheck "Enable ColdFusion Event Gateway Services".

3. Select "Submit Changes".

Check Contents

Check Event Gateway Service.

1. From the Admin Console Landing Screen, navigate to Event Gateways >> Settings.

If Event Gateway is not in use and "Enable ColdFusion Event Gateway Services" is checked, this is a finding.

Vulnerability Number

V-279041

Documentable

False

Rule Version

APAS-CF-000195

Severity Override Guidance

Check Event Gateway Service.

1. From the Admin Console Landing Screen, navigate to Event Gateways >> Settings.

If Event Gateway is not in use and "Enable ColdFusion Event Gateway Services" is checked, this is a finding.

Check Content Reference

M

Target Key

5724