The official community for ColdFusion.
Recently active
NOW LIVE — the June 2026 security updates for ColdFusion 2025 and ColdFusion 2023 have been released. This update includes important security fixes that mitigate vulnerabilities related to arbitrary code execution, arbitrary file write, information disclosure, stored cross-site scripting, and security feature bypass. What’s includedThe June 2026 release contains:Tomcat upgrades. See the respective tech notes for more details. Security fixes for multiple vulnerabilities (including remote code execution and privilege escalation vectors). Patches to harden request handling, deserialization paths, and template parsing logic. Updates to packages.Why you should install this updateThese fixes close high‑ and critical‑severity vulnerabilities that could be used by attackers to execute code, elevate privileges, or access sensitive data. Applying the update reduces risk to your production and development environments.Download the updatesColdFusion 2025 updates ColdFusion 2023 updatesSee the tech
NOW LIVE — the April 2026 security updates for ColdFusion 2025 and ColdFusion 2023 have been released. This update addresses multiple security issues and includes important mitigations we recommend you apply as soon as possible.What’s includedThe April 2026 release contains:Tomcat upgrades. See the respective tech notes for more details. Security fixes for multiple vulnerabilities (including remote code execution and privilege escalation vectors). Patches to harden request handling, deserialization paths, and template parsing logic. Updates to packages.Why you should install this updateThese fixes close high‑ and critical‑severity vulnerabilities that could be used by attackers to execute code, elevate privileges, or access sensitive data. Applying the update reduces risk to your production and development environments.Download the updatesColdFusion 2025 updates ColdFusion 2023 updatesSee the tech notesColdFusion (2025 release) Update 7 ColdFusion (2023 release) Update 19 Docker and CF
We are pleased to announce the availability of ColdFusion Builder Extension for Visual Studio Code. Needless to say, we are as excited as you are to release this plugin. Now you'll be able to edit and validate code, manage files, projects, and servers, debug, and scan for security vulnerabilities, directly on Visual Studio Code. What's in it for me A lot, actually. The all-new Adobe ColdFusion Builder extension for VS Code helps developers to edit and validate code, manage files and projects, and debug and scan for security vulnerabilities. Why do I need this extension? Integrate the Adobe ColdFusion Builder Extension on your VS Code to: Automate repetitive tasks and navigate code for a smoother and faster process. Enjoy built-in support for IntelliSense code completion, better semantic code understanding, and code refactoring. Identify security vulnerabilities and maintain the integrity of your code. Manage your work with extensions, remote project support, inte
I want to check bug reports in this new category
I’m trying to setup a configurable coldfusion docker/kuberntes environment where I can just swap the datasource configs in order to boot up different stages.I have managed to do this locally on docker by setting up datasources in the cfusion admin page, and then copying the neo-datasource.xml configuration to my host machine.After that, I adjusted my docker compose to mount the neo-datasource.xml to it’s respective location: volumes: - ./coldfusion/neo-datasource.xml:/opt/coldfusion/cfusion/lib/neo-datasource.xmlThis works.Though, this only works locally, and not on kubernetes. In my attempt to replicate this for kubernetes, I have mounted the neo-datasource.xml into my kuberntes deployment via configmap, but cfusion attempts to write into neo-datasource.xml which is an issue because kubernetes configmaps are always read-only. Here’s the correlating log error: Unable to install SQL package: coldfusion.server.ServiceRuntimeException: java.io.FileNotFoundException: /opt/coldfus
An update came out yesterday and someone at our company was attempting to install it to our servers. We noticed that one of the servers was not loading the CFAdmin screen. So we applied the patch via the command line instead, hoping that may fix the issue but it didn’t. We are currently on ColdFusion 2023 (2023,0,21,330920) on Windows Server 2019. The troubleshooting steps taken were rebooting the server as well as running the Web Configuration tool to remove and recreate the profile.Any help is appreciated. The error we are getting is:Could not find the included template ../../login.cfm. Note: If you wish to use an absolute template path (for example, template="/mypath/index.cfm") with CFINCLUDE, you must create a mapping for the path using the ColdFusion Administrator. Or, you can use per-application settings to specify mappings specific to this application by specifying a mappings struct to THIS.mappings in Application.cfc. Using relative paths (for example, template="index.cfm
Adobe has released ColdFusion 2025 Update 10 and ColdFusion 2023 Update 21. The releases introduce some important advancements that reinforce a clear direction: secure-by-default behavior, tighter control, and better developer governance. Download the updatesColdFusion 2025 updates ColdFusion 2023 updatesThis update focuses heavily on addressing critical security concerns while also giving developers more control over how their applications interact with external systems, attachments, and XML processing.Security fixes and cumulative patchesBoth updates address multiple vulnerabilities that could result in arbitrary code execution, privilege escalation, and security control bypass.From an operational standpoint, this update is cumulative, which means patch adoption does not require sequential upgrades. However, teams skipping prior updates should account for behavioral changes introduced in intermediate versions, especially in areas that now enforce stricter validation.Attachment handli
The ColdFusion 2025 zip installers available for download at https://guides.adobe.com/coldfusion/en/docs/install-and-configure-coldfusion/coldfusion-downloads.html do not match the MD5 checksums linked from that page at https://cfdownload.adobe.com/pub/adobe/coldfusion/2025/zipinstaller/Checksum_CF2025_.zipinstaller.txtIt looks the zip installers were updated with Update 8 but the checksums haven’t been updated.
I’m trying to activate our enterprise license on a Linux server in the CF admin portal, but got this error: errorAn error occurred while trying to encrypt or decrypt your input string: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.. Any advice? Thanks,Luvian
Hello! Our software company operates a commercial CMS platform called AreaENGINE and has multiple customer websites hosted on a single ColdFusion 2025 server instance. My question is: Can a ColdFusion 2025 Standard Named User License (NUL) be used for this type of commercial service? We'd like to know if there are any restrictions regarding the number of websites, domains, or customers hosted on a given serverso we can confirm the licensing model before launching new customer services.
First of all, I have no coldfusion experience at all. So when answering or asking for coldfusion specifics, please try to keep your answer/question somewhat lightweight :)I’m trying to setup a minimal cfusion2025 image that runs on openshift. I currently have some issues with the image’s existing cfuser or the pod’s permissions.Dockerfile:FROM adobecoldfusion/coldfusion2025:latestUSER rootCOPY ./sources /appEXPOSE 8080 8500Pod logs:Skipping Configuration and Setting Wizardsed: couldn't open temporary file /opt/coldfusion/cfusion/lib/sedFCBEbg: Permission deniedsed: couldn't open temporary file /opt/coldfusion/cfusion/lib/sedMKjs1Y: Permission deniedUpdating webroot to /appConfiguring virtual directorieschown: changing ownership of '/app': Operation not permitted (os error 1)chown: changing ownership of '/app/index.cfm': Operation not permittedchown: changing ownership of '/app/test': Operation not permittedchown: changing ownership of '/app/test/cfm': Operation not permittedchown: chan
coldfusion report Calculated Field SumForwardSumForward(Sum:iif((query.SumOfTrainingHours + calc.SumForward GTE 40),iif(calc.SumForward + query.Carryover LTE 40,query.Carryover,40-calc.SumForward), query.SumOfTrainingHours))This statement above is calculating the wrong result This if else below will return the correct result but I don’t understand how to format this for the ColdFusion report .Can someone help?<cfif query.SumOfTrainingHours + query.Carryover GT 40 and query.SumOfTrainingHours + query.Carryover LTE 80 > <cfset result = query.SumForward + query.Carryover - 40><cfelseif query.SumOfTrainingHours + query.Carryover GT 80 > <cfset result =40><cfelse> <cfif query.SumOfTrainingHours eq 40> <cfset result = 40 > <cfelseif query.SumOfTrainingHours + query.Carryover eq 40> <cfset result = 0> <cfelse> <cfset result = query.SumOfTrainingHours </cfif></cfif> ThanksJimBe
Coldfusion 2025 Broken after Update 81. Administrator does not launch (500 Error)application.log is showing:Could not initialize class org.apache.bcel.util.ClassPath The specific sequence of files included or processed is: C:\ColdFusion2025\cfusion\wwwroot\CFIDE\administrator\index.cfm, line: 1522. Our applications are reporting:Could not process Application.cfc successfullyWhen using packing managercfpm install allWe notice access denied errors from the getgo:C:\ColdFusion2025\cfusion\bin\..\lib\toInstallBundles.txt (Access is denied)C:\ColdFusion2025\cfusion\..\bundles\bundlesdependency.json (Access is denied)
After migration from CF2016 to CF2025 custom fonts are not used anymore in cfr reports. Replacement fonts are used instead.I configured them in the same way as I did in CF2016. They are displayed in the Server Settings -- Font Management tab.I am using CF2025 Update 8 on Windows 11.Please advise.
Update 8 for CF 2025. The link for the packages is https://cfdownload.adobe.com/pub/adobe/coldfusion/2025/packages/hotfix-packages-cf2025-008-331874.zip. The link for the Jar seems to be update 7 https://cfdownload.adobe.com/pub/adobe/coldfusion/2025/updates/hotfix-007-331586.jar. Should I try the packages and update 7? This is an air gapped system. Thanks!
ColdFusion 2025 update 8 delivers native AI and LLM integration with a unified multi-provider framework, Model Context Protocol support for building and consuming AI tool interfaces, vector stores and RAG for grounding AI in your own content, passwordless passkey authentication, a rebuilt VS Code extension with Linux and Docker support, AI services monitoring in PMT, and significant language improvements including native Sets, async enhancements, and Java interoperability.What’s new in ColdFusion 2025 Update 8Native AI and LLM integrationColdFusion 2025 update 8 adds first-class AI support directly into the language. You access AI providers through built-in CFML functions that integrate with your existing components and application logic — not through generic HTTP calls. A unified provider framework lets you write one set of code that works across OpenAI, Anthropic, Mistral, Google Gemini, and Ollama. Switching providers requires only a configuration change, no code refactoring. Two en
A recent update has broken Scheduled Tasks for us. The small Pause, Resume and Play icons work but we are not able to create a new Scheduled Task or Edit an existing one. We have CF 2023.0.19.330899 on both local and live servers and does this on both. It also does this on CF 11,0,19,314546. Whenever a new task schedule is attempted, or edit an existing one, after hitting the “Submit” button on the form, the browser says “Server sent back an empty page”. I have tried in different browsers and it gives same results. Can you help?
I have a new Windows 11 system and have just installed CF 2025 on it. At first the administrator opened properly, but today when I went back to do some more configuration, it refuses to open. Every time I try I get the same message … this site can’t be reached. The URL it is using is http://127.0.0.1:8500/CFIDE/administrator/index.cfm I see the CF entry in services and it says it is running. I’m not an operating system guy so I really don’t know what to try next. I reinstalled CF but that didn’t fix it. Would appreciate some advice on what to do next.
coldfusion report Calculated Field SumForwardSumForward(Sum:iif((query.SumOfTrainingHours + calc.SumForward GTE 40),iif(calc.SumForward + query.Carryover LTE 40,query.Carryover,40-calc.SumForward), query.SumOfTrainingHours))I’m not familiar with report query syntax say querySumOfTraining hours = 20 and query.Carryover = -20 what is the order of processing within the query and what value does calc.Sumforward get as the query proceeds. And what is the final value for SumForward. ThanksJimBerkes
I’m to this system but have been asked to update it.
The syntax highlighting is one of the most important features for IDEs because they tell coders if there are problems with the code. I'm currently using version 1.0.701 and noticed an annoying problem whenever the “#” is found on the script. CF Builder assumes that every time it encounters a #, it is part of a variable evaluation, which is commonly used in CF tag attributes or between <cfoutput> tags. But in html, the # is used such as in css settings for colour. As a result, we get problems like these: In this example above, the # is used properly, and is part of standard html that is not parsed by the CF server. Adding a second # tricks CF Builder into thinking that the # has been escaped: But this is wrong and will cause problems because the final html code that is sent to the end user's browser will contain two #s. The only way to fix the problem is additional CF code:But this is an inefficient way of handling things. We shouldn't need to nest html tags within <cfout
ColdFusion 2023 - download and installation linkI have had a hard drive on my server fail and have had to replace the drive. I had ColdFusion 2023 installed and running on the server along with MySQL.I have 2 critical applications that I have developed using CF 2023 and MySQL. I'm trying to find a link so as to be able to download and install CF 2023 on my server again so that I get back into the apps and get them running again.Any assistance in being able to provide a link where I can download CF 2023 will be greatly appreciated. Thank you in advance for sending me a link where I can download CF 2023
my linter thinks there is an invalid token here, but there isn’tTL;DR: The red squiggle underline is caused, in some way, by the CF Builder extension. It’s wrong, the code and the file are fine, and I want it to go away. Anyone know how to make it go away?Details:I installed this extension a few weeks ago, and I didn’t notice (or I ignored) it at the time, but I started getting these red-squiggle notifications on *some* javascript / JSON files. I finally tried narrowing down the problem today, and after blaming it on eslint for a little while, and/or various rules in my project’s `eslintrc.json` file, I disabled all extensions and the error went away.So I used vsCode’s “Extension Bisector” to find the culprit. I didn’t know this existed till today. Basically it starts by disabling all extensions and reloading your window, and asks you if you can reproduce the problem. You say yes/no, and then it reloads again with some extensions enabled. You repeat the process several times until fina
I tried to submit a trouble-ticket on the tracker.adobe.com, but I’m getting a 500 error. Yay.Does anyone have any information on ColdFusion 2023 Enterprise and the Microsoft Visual C++ 2012 Redistributable? This specific redistributable has reached End of Life (EOL) and is no longer supported or patched by Microsoft. Utilizing EOL software directly violates Risk Management Framework (RMF) and Department of Navy cybersecurity requirements. This outdated dependency unnecessarily increases the system’s attack surface area.
Hi CF Experts,Recently I have changed my laptop and installed ColdFusion 2023 and installing updated from Update 6. But I am unable to download and Install it from CF Admin. Below is screen and getting an error Uncaught TypeError: Cannot read properties of undefined (reading 'cfhf_buildnumber') Can you please help on this.
Remix with Firefly Community Gallery
Thousands of free creations to fall in love with and remix in Firefly.
Already have an account? Login
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.