Adobe has released patches to address multiple security vulnerabilities in its ColdFusion web development and JRun Java administration tools.
The updates fix flaws in both applications that could allow an attacker to take control of a targeted system and remotely execute code.
The ColdFusion update addresses five vulnerabilities in versions 7.0.2, 8.0 and 8.0.1 of the web application development platform. The flaws could allow escalation of privileges, information disclosure or remote code execution.
The JRun patch covers two vulnerabilities, one that could allow an attacker to remotely execute code via a cross-site scripting attack, and one that could allow for information disclosure.
Adobe said that the issues are considered critical, and advised users and administrators to install the updates immediately.
The updates from Adobe come one week after Microsoft released its monthly security update, which included fixes for Windows and Office, including five critical vulnerabilities.
Adobe rolls out critical security updates
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Kris Manché, Panel Expert at Index Brisbane
Building higher tier service offerings with cost-effective, proactive monitoring
AI PCs shift from hype to revenue opportunity for partners
MSPs have spent a decade telling clients to consolidate. Few take their own advice.
In the memory market that AI just broke, here’s what you must do now




