Adobe has issued an advisory for seven critical vulnerabilities in its web design and development platforms, ColdFusion and JRun.
The vulnerabilities, which affect ColdFusion versions 8.0.1 and earlier, and JRun 4.0, could result in user accounts or an affected system being compromised.
"Adobe is not currently aware of any exploits in the wild for the security vulnerabilities fixed in this release," according to an Adobe Product Security Incident Response Team blog post.
Several cross-site scripting bugs in ColdFusion could potentially lead to code execution. Other bugs in ColdFusion addressed in the update could lead to information disclosure or privilege escalation, Adobe said in its security bulletin.
In addition, issues with the management console for JRun could potentially lead to information disclosure or code execution.
In July, Adobe fixed a zero-day vulnerability in ColdFusion, which was being used to compromise ColdFusion websites.
Adobe ColdFusion, JRun updated for critical issues
More patches for the web design and development platform.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
Promoted Content
How David Jones, Canva and others are putting agentic AI to work
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
.jpg&w=100&c=1&s=0)
.png&w=100&c=1&s=0)
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
