CVE-2007-1278: Adobe ColdFusion

Medium severity, CVSS 4.3. EPSS: 22.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.

Affected products

• Adobe ColdFusion: version 6.1 only; version 7.0 only
• Adobe Jrun: version 4.0 only

Published 2007-03-16. Last modified 2026-06-16.