STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must set an organization defined maximum JVM heap size.

DISA Rule

SV-279090r1171582_rule

Vulnerability Number

V-279090

Group Title

SRG-APP-000435-AS-000163

Rule Version

APAS-CF-000835

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure JVM Arguments heap size.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Java and JVM.

2. Set "Maximum JVM Heap Size (in MB)" to the appropriate amount.

3. Select "Submit Changes".

Check Contents

Verify JVM Arguments heap size.

From the Admin Console Landing Screen, navigate to Server Settings >> Java and JVM.

If the "Maximum JVM Heap Size (in MB)" is not set to the required amount, this is a finding.

Vulnerability Number

V-279090

Documentable

False

Rule Version

APAS-CF-000835

Severity Override Guidance

Verify JVM Arguments heap size.

From the Admin Console Landing Screen, navigate to Server Settings >> Java and JVM.

If the "Maximum JVM Heap Size (in MB)" is not set to the required amount, this is a finding.

Check Content Reference

M

Target Key

5724