ColdFusion Hotfix Resolves XSS, Java Deserialization Bugs Posted on April 26, 2017 by Simon Steed Adobe released an important security hotfix for several versions of Coldfusion, resolving two bugs, Tuesday morning.