CVE-2007-1278
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1...
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
- Record
CVE-2007-1278- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
- Record
CVE-2007-1278- Updated
- 2026-11-02
EUVDEUVD-2007-1275 No score
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
- Record
EUVD-2007-1275- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qv5g-8mxx-qwcq No score
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1...
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.
- Record
GHSA-qv5g-8mxx-qwcq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1278 is a medium vulnerability (CVSS 4.3) in Adobe Coldfusion, published March 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 23.3%, the 97th percentile. No source names a fixed version.
References
securitytracker.com/id?1017752
osvdb.org/34039
adobe.com/support/security/bulletins/apsb07-07.html
secunia.com/advisories/24488
vupen.com/english/advisories/2007/0932
exchange.xforce.ibmcloud.com/vulnerabilities/32994
securityfocus.com/bid/22958
nvd.nist.gov/vuln/detail/CVE-2007-1278
github.com/advisories/GHSA-qv5g-8mxx-qwcq