STIGQter STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must have the Java Runtime Environment (JRE) updated to the latest version.

DISA Rule

SV-279110r1171432_rule

Vulnerability Number

V-279110

Group Title

SRG-APP-000516-AS-000237

Rule Version

APAS-CF-001100

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Install the latest version of the supported JRE.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Java and JVM.

2. Change the "Java Virtual Machine Path" value to the folder with the latest JRE.

3. Select "Submit Changes".

4. Restart ColdFusion.

Check Contents

Verify JRE.

1. From the Admin Console Landing Screen, navigate to the System Information page by clicking the "i" button on the right side of the top navbar.

2. Review the Java Version and verify it matches the latest version available.

If the version is not the latest, this is a finding.

Vulnerability Number

V-279110

Documentable

False

Rule Version

APAS-CF-001100

Severity Override Guidance

Verify JRE.

1. From the Admin Console Landing Screen, navigate to the System Information page by clicking the "i" button on the right side of the top navbar.

2. Review the Java Version and verify it matches the latest version available.

If the version is not the latest, this is a finding.

Check Content Reference

M

Target Key

5724