We are in the process of moving our Intranet based applications from an old Server 2003 box running Cold Fusion 9 to a 2008 box running Cold Fusion 11. The current production server is still Cold Fusion 9.
A strange thing occurred this morning, an HR user in one of our hospitals got a new Windows 7 computer with Java 8 installed and when she went to use the Recruiting app on our Cold Fusion 9 production server, she got that Java Security error because that page uses <CFGRID> tags, I was able to duplicate the problem by upgrading my workstation Java to Version 8, but the strange thing is the Version 8 it works fine on the new Cold Fusion 11 server. I had copied that application over a few weeks ago and it's been working OK.
The workaround for now has been to install the Java Version 7 Update version that still allows you to set the security settings to medium and add our Intranet URL to the exception sites.
Most of what I've read online has to do with Mappings to the CFIDE folder, but all of that is OK, and I'm not getting a great deal of detail from Java on exactly what the problem is. Eventually we'll be live on the Cold Fusion 11 server so it's kind of a moot point, but my boss is wanting to know why, so if anyone has any ideas, please let me know.
The Java applet bits of CFIDE were updated on ColdFusion 11 to provide security certificates required by Java 8 (and maybe Java 7 required them too, can't remember). ColdFusion 9 was never certified for Java 8, so it's CFIDE applets were not updated to meet compliance. You will need to move to CF10 or CF11 to eliminate those issues.
Well that makes things pretty easy.
Thanks for the reply. I'll forward this on to management, should help accelerate our timeline to put the new CF server into production.