ColdFusion

We are pleased to announce that we have released general updates to ColdFusion (2023 release) Update 11 and ColdFusion (2021 release) Update 17.    The updates include bug fixes and enhancements in Administrator, Language, CFSetup, Database, and other areas. They also contain library upgrades, such as netty, ehcache, etc.   After applying the update, we recommend clearing the Felix cache as a workaround for installing the HTMLToPDF package and verifying the Oracle data source.   The updates also contain enhancements to whitespace management and client variable support in CFPM.   Where do I download the updates from Download the updates from the following locations: ColdFusion (2023 release) Updates ColdFusion (2021 release) Updates   For more information, view the following tech notes: ColdFusion (2023 release) Update 11 ColdFusion (2021 release) Update 17   Known issues in the update The PDF Services page in ColdFusion Administrator does no

[cf]\cfusion\wwwroot\cf_scripts\scripts\ajax\ckeditorOur internal vulnerabity scan refers to the above folder (ckeditor) in the ColdFusion 2021 installation path as vulnerable which is also mapped to the webiste as a virutual directory. How can we fix this issue and pass the vulnerability test.

The update 17 was installed on 10/23/2024. This morning the ColdFusion application server cannot be started through Windows Services. I then use cfstart.bat running as Administrator to start the server, it stuck at the following step without success.Dec 6, 2024 09:12:38 AM Information [main] - Package spreadsheet started...Dec 6, 2024 09:13:15 AM Information [Timer-0] - An error has occurred while sending usage data to server.

When I login to the ColdFusion 2021 Administrator pages and select Server Settings -> Settings Summary -> System Information, the operating system shown is incorrectly displayed. The installation is on Windows Server 2022 and the display shows Windows Server 2016. Has anyone else seen this issue? I am concerned that there may be some corruption in the installation, as we have just applied Hotfix 16.

[BETA PROGRAM UPDATE] 4 Dec 2024 Created a post to announce deprecations and removals in the next release. Launched the top contributor contest. More sign-ups to the program. Added documentation of the earlier drops.   Get an exclusive sneak peek at what’s next for ColdFusion! Sign up for the ColdFusion 2025 Beta Program and get early access to shape the future with us. Engage with the community in the forums, share your thoughts, and keep up with the newest updates and features.   Join the Beta program   Exclusive deep-dive sessions will be hosted by the engineers who built each feature in ColdFusion 2025.    Check out the session details here.   Join the Beta program and help shape the future of ColdFusion. We're counting on you!

I've installed ColdFusion2023  on a server behind a firewall.  I've updated it with Update 7 and Update 11I've entered a valid license number and hit "Activate".  After the action fails and the "no internet connection...etc" error is displayed, there is no "Generate Activation Request" link/button. I'm not sure if its relevent, but during the installation, for the Deployment Type, I choose “Development” and for the Server Profile, I chose “Development Profile”. 

I need to download CF 21 for use on my local machine only. (free version)Windows 64-bitWhat do I want to download from this page?https://helpx.adobe.com/coldfusion/kb/coldfusion-downloads.html#downloads1: 

I downloaded the trial of Coldfusion 10 64 bit for windows and have tried multiple times to open it on my Windows 2008 Server.  When I double click the EXE, the hourglass spins for a few seconds, and then nothing happens.  I've rebooted and the same thing happens.  I have also tried installing the 32-bit version on my windows XP computer and the same thing happens.  What am I doing wrong?  Thanks in advance!

I was forced to upgrade from Coldfusion 2018 to Coldfusion 2021, update 16.  For our database connection we are using the Oracle wallet to use ssl authentication.  This was working fine in 2018.  Now with the upgrade it stopped working.  The error is this:java.sql.SQLNonTransientConnectionException: [DataDirect][Oracle JDBC Driver]Error during renegotiation of SSL socket. I found this article on the same error that occurred with a version of the datadirect drivers:https://community.progress.com/s/article/Unable-to-get-JDBC-connection-to-SSL-enabled-multitenant-Oracle-database-with-HostNameInCertificate-option My question is, I know the version shipped with coldfusion 2021 is 6.0, but what is the patch/build version?  I want to compare it against what is in the progress datadirect article to see if that is the problem.  I already tried updating to CF update 17 for 2021, and that mucked up our other database connection as well, so I uninstalled it

Dear all,I'm trying  to solve the vulnerability in object, following the guide at Log4j vulnerability on ColdFusion (adobe.com),  but there are step not clear to me (in red my doubts):ColdFusion (2018 release)ColdFusion 2018 ships with log4j 2.13.3 and/or 2.9.0, and log4j 1.2. The former is impacted by this vulnerability, while the latter (that is, v1.2) is not impacted. Stop the server. Navigate to the directory <cf_root>\<Instance_name>\bin.Open jvm.config file and add -Dlog4j2.formatMsgNoLookups=true argument in java.args section. Save the file.Done Copy the patched log4j-core-2.9.0.jar file with JNDILookUp class that you have removed.Removed? I didn't remove anything until now. And copy where?The new file can be downloaded from here. If you find log4j-core-2.9.0.jar, move the file to a temporary location. If not found, skip this step.If I find it... if not found... W

dailyStatus = "select * from MyTasks ";if(Len(custom.ORDER)){            dailyStatus = dailyStatus & custom.ORDER;        }        else if (isDefined("URL.OrderBy") AND Len(URL.OrderBy)){            dailyStatus = dailyStatus & " ORDER BY " & "?" & " " & "?";            arrayAppend(params,{value:URL.OrderBy,cfsqltype:"cf_sql_varchar"});            arrayAppend(params,{value:URL.Direction,cfsqltype:"cf_sql_varchar"});        }        else{            dailyStatus = dailyStatus & "ORDER BY TimeRemaining, LastModifiedDate";        }        qryList = QueryExecute(dailyStatus, params, {datasource = REQUEST.CFG.DS}); This doesn't seem to work , because I'm getting error, Error Executing Database

I have problems with the mod_jk.log file, it grows exponentially until it runs out of space on the hard driveWindows Server 2022ColdFuision 2023Apache 2.4.62 (64Bits).<Connector packetSize="65535" protocol="AJP/1.3" address="::1" port="8022" redirectPort="8455" secret="9c59d633-9c26-4560-bf94-85faf8a3f382" maxThreads="500" connectionTimeout="60000" tomcatAuthentication="false"/> File mod_jk.log:[Wed Nov 27 17:02:10 2024] [10736:5656] [debug] wc_get_worker_for_name::jk_worker.c (157): found a worker cfusion[Wed Nov 27 17:02:10 2024] [10736:5656] [debug] wc_get_name_for_type::jk_worker.c (341): Found worker type 'ajp13'[Wed Nov 27 17:02:10 2024] [10736:5656] [debug] ajp_get_endpoint::jk_ajp_common.c (3779): (cfusion) acquired connection pool slot=0 after 0 retries[Wed Nov 27 17:02:10 2024] [10736:5656] [debug] ajp_marshal_into_msgb::jk_ajp_common.c (763): (cfusion) ajp marshaling done[Wed Nov 27 17:02:10 2024] [10736:5656] [debug] ajp_service::jk_ajp_common.c (2809): processin

Hi Adobe Community,I run a website NBI Clearance Online that provides important resources and guides for users. Many of the resources are offered as downloadable PDF files.Recently, I noticed some users experiencing slow load times when accessing these PDFs. I use Adobe Acrobat Pro for creating and managing the documents. Could you share best practices for optimizing PDFs for web performance while maintaining high quality?Thank you in advance for your help!Best regards,

Hello,has anyone experienced this error before?We are getting this error after we patched the Oracle server to 19.23 -> 19.24. In both Coldfusion 2021u12 (java 11.0.7) and 2023u8 (java 17.0.11) in the datasources with "Oracle" client we get this error in CFadmin: Connection verification failed for data source: DATASOURCE_Ajava.sql.SQLException: [DataDirect][Oracle JDBC Driver]arraycopy: destination index -1 out of bounds for byte[128] The exceptions.log show more details: "Error","http-nio-8500-exec-9","07/23/24","09:36:08","user1","[DataDirect][Oracle JDBC Driver]arraycopy: destination index -1 out of bounds for byte[128]"java.sql.SQLException: [DataDirect][Oracle JDBC Driver]arraycopy: destination index -1 out of bounds for byte[128]at macromedia.jdbc.oracle.base.BaseExceptions.b(|Oracle|6.0.0.1051|:1102)at macromedia.jdbc.oracle.base.BaseExceptions.a(|Oracle|6.0.0.1051|:976)at macromedia.jdbc.oracle.base.BaseExceptions.b(|Oracle|6.0.0.1051|:1128)at macromedia.jdbc.

Good morning,We used CF2021 and we installed the lates update 17. Started having issues with our login system in one box losing the cfathentication session var.I created a test login to trace the issue in the same box, because in other box works fine. The security team applied some stigs to the box lately and not sure if that is afecting the browser.When user login the first time the cfauthentication is not showing.Here is the application.cfc<cfcomponent output="false" hint="I define the application settings and event handlers."> <cfscript> //Define the application settings. this.clientManagement = false; // define the cflogin storage this.loginStorage = "session"; this.name = listLast(getDirectoryFromPath(getCurrentTemplatePath()), "\"); this.applicationTimeout = createTimeSpan( 0, 0, 0, 10 ); this.sessionManagement = true; this.sessionTimeout = createTimeSpan( 0, 0, 5, 0 ); this.setClientCookies = true; this.secureJSONPrefix = ""; </cfscript>

Hello, I am trying to setup a datasource using the Sybase JDBC 3 driver that we have been using since Coldfusion 9 but I am getting an error message: "Connection verification failed for data sourcejava.sql.SQLException: The method com.sybase.jdbc3.jdbc.SybDatabaseMetaData.getJDBCMajorVersion() has not been completed and should not be called." Please help me on how to resolve this issue. Thanks! 

Hello, I would like to know if we can use our serial number in Coldfusion 2023 to use it on an older version like Coldfusion 2021?

Is there a way to preserve leading zeroes in a field when displaying in excel other than adding a ' at the front of the field?  I have an id field defined in sql server as varchar but when creating an xls document using cfspreadsheet excel is interpreting the field as numeric and dropping the leading zeroes.  I cannot have the ' leading that field since it is imported into another system.

We are starting to play with REDIS for session storage in Coldfusion 2016. When I use a basic REDIS setup everything works fine. However, when I create a REDIS cluster we get a Moved 1456 error message. I have been trying to find something on this but have not found a solution.Thanks,Kane

Team, In my code I'm trying to dynamically replace the # with ##.  Code is ,for(key in localStruct.AdditionalFieldsToUpdateStruct)  {                    localStruct.AdditionalFieldsToUpdateStruct[key] = replace(localStruct.AdditionalFieldsToUpdateStruct[key],'##','####','all'); } But while displaying, one field shows # and other shows ##,   Not able to find the reason why this happens, Can you please help? Code where the fields are displayed , <td class="formRow">#local.fields[FiName].Display# </td>   

Hello! I am getting a Java error when attempting to use the iText library to add an image to a PDF. Orr front-line staff uses Topaz signature pads to capture signatures. These files are then saved as GIFs. Our back-end office opens these applications, which are PDFs with form fields. The iText library takes the images and places them on the PDF. Attached is the error I'm getting, and also a code snippet. This runs fine in our dev environment, which is identical to our production. I get this error on production. Both servers are running Coldfusion 2023 update 11. Same Java version 17.0.6, etc. I'm at a loss as to why it would work on one but not the other. I'm not sure what I should be looking for. 

Hi everyone,I using CF Enterprise edition on windows server. i have created a instance using the dashboard and when i start that instance i see this error in the coldfusion-out.log file There is already a Contentinstance1 running in the contentinstance cluster and i am trying to launch a new instance called "contentinstance2" add it to the cluster I have created config for each site selecting the content instance cluster ( using the CF Web config tool )Just trying to as much information as possible , : )I am new to this and any help is much appreciated.thanks,Nov 19, 2024 04:36:27 AM Information [main] - No services directory was found under C:\CF2021\ContentInstance2\wwwroot\WEB-INF. Nov 19, 2024 04:36:27 AM Information [main] - No modules directory was found under C:\CF2021\ContentInstance2\wwwroot\WEB-INF. 

Is there any way to turn off the "Session rotated sucessfully." logging when calling SessionRotate()? It really fills up the logs.

I'm running in this error with CFLDAP after we updated one of our SSL certificates in our keystore.  We have a few domains using this ColdFusion server (running CF 11). We believe that it is trying to use the SSL certificate recently updated, instead of the correct one (for the site that needs to communicate to the LDAP server).Error Message:  An error has occurred while trying to execute query :SASL bind failed: some.server.com:1636.   One or more of the required attributes may be missing or incorrect or you do not have permissions to execute this operation on the server.code:<cfldap server = "myserver" port = "1636" secure = "CFSSL_CLIENT_AUTH" clientcert = "/my/keystore" clientcertpassword = "mypassword" action = "query" name = "results" start = "mystart" filter = "myfilter" attributes = "myattributes" timeout = "600000">Is there any way to specify the certificate alias with CFLAP?Does anyone know how it chooses which certificate to use?  like alphabet

A quick post in case anyone else ever runs in to this memory issue.  Our CF servers seemed to have a "memory leak", in that the memory being used  (Windows) by the CF service would gradually grow until it was maxing out the entire server. Long-story-short, we found (with the folks over at xByte cloud hosting) in a thread dump that we had tens of thousands of hung (waiting) threads with the name: sdk-ScheduledExecutor Turns out, that thread is created by the AWS SDK for Java, which we are not using.  Not surprisingly, though, ColdFusion does use a version of this SDK for their cloud services functionality.  We use that extensively when interacting with S3.  At first we thought there could be a bug in CF or in the SDK if it's spawning all these threads.  But, when pouring over Adobe's docs we found the following little tidbit on this page: Oh!  The getCloudService() function must be in a shared scope? In true Adobe fashion, none of t