# MA-991.112023: MyCERT Advisory - Adobe Releases Security Updates for ColdFusion

**Date:** 24 Nov 2023  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-991.112023  
**Advisory ID:** MA-991.112023

---

**1.0 Introduction**
On Nov. 14, 2023, Adobe released security updates addressing vulnerabilities affecting unpatched ColdFusion software.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow a malicious cyber actor to take control of an affected system.
**3.0 Affected Products**
|  |
| --- | --- | --- | **Product** | **Update number** | **Platform** | ColdFusion 2023 | Update 5 and earlier versions | All | ColdFusion 2021 | Update 11 and earlier versions | All |
**4.0 Recommendations**
MyCERT urges organizations to review [Adobe ColdFusion security bulletin APSB23-52](https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html) for more information and to:
- Apply the recommended updates in [APSB23-52](https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html).
- Follow Adobe recommendations on ColdFusion hardening.?
- [ColdFusion 2023 Lockdown Guide](https://www.adobe.com/go/cf2023_lockdown_guide)
- [ColdFusion 2021 Lockdown Guide](https://www.adobe.com/content/dam/cc/us/en/products/coldfusion/pdfs/cf-starter-kits/coldfusion-2021-lockdown-guide-1.1.pdf)
- Consider adding a web application firewall (WAF) filter for CFIDE for external users.
Kindly visit <https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html> for more information.
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html>
- <https://www.cisa.gov/news-events/alerts/2023/11/22/adobe-releases-security-updates-coldfusion>