STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must have any unused mappings removed.

DISA Rule

SV-279045r1171287_rule

Vulnerability Number

V-279045

Group Title

SRG-APP-000141-AS-000095

Rule Version

APAS-CF-000235

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Delete unused mappings.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Mappings.

2. Delete any mapping that is not being used by the hosted applications.

Check Contents

Verify Mappings.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Mappings.

2. For each of the mappings defined, ask the administrator if the mapping is being used by any hosted applications.

If any of the mappings are not being used by the hosted applications, this is a finding.

Vulnerability Number

V-279045

Documentable

False

Rule Version

APAS-CF-000235

Severity Override Guidance

Verify Mappings.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Mappings.

2. For each of the mappings defined, ask the administrator if the mapping is being used by any hosted applications.

If any of the mappings are not being used by the hosted applications, this is a finding.

Check Content Reference

M

Target Key

5724