ColdFusion

Hi everyone, We're excited to announce a new Adobe Community experience is coming this January. A little bit about the update:The new experience will be simpler to navigate, make it easier to connect with other creatives and Adobe experts, and will give you clearer ways to share feature ideas, enhancement requests, and bug reports—with greater visibility into their status with our product teams. In the meantime: Adobe Community will remain active. Keep using it as usual—there will be no interruption in access. In fact, you’ll notice even more Adobe Experts on deck to provide faster responses before, during, and after the update. No existing content will be lost in the update. Every single post, reply, solution, feature request, and bug report you’ve made will be transferred to the new experience. You won't need to recreate anything. Existing content will reappear in two phases. When we launch the new community, all posts created on or before November 16 will be there from day one. Aft

We have an application (CF2013 running on Win2019)  that is failing with the error pasted below  "Error","ajp-nio-127.0.0.1-8022-exec-8","12/03/25","15:42:36",SIRdmini11_25_p1,"The axis package is not installed.You can install package through CLI package manager (D:/ColdFusion2023/cfusion/bin/cfpm.bat) by running the command : install axis. It is stating to install the axis package. But according to the cfpm.bat list.. its says that the axis package is installed(see below).   This package and this version of the package is installed on a different ColdFusion server of ours and the application is working just fine there.  Additionally I have cleared the Felix-cache, and that did not fix the error.  Any suggustions?  Thanks! 🙂coldfusionerror.png

In our development environment, we've started testing and deploying new code with CF2025.However, our CI/CD is based on CF2023, as it's still in our production environments.We've had a compilation error in our pipelines, which I'll summarize here:<cfscript> s = { key1 = 1, } writeDump(s); </cfscript> On CF2025: no reportsOn CF2023 (or all other previous versions): an "Invalid CFML construct found" exception is received In my opinion, the exception reporting handled so far in CF2023 is correct and is a bug to report in CF2025.In your opinion, is it right or wrong?

We are running CF 2023 and just updated from Update 14 to Update 16.  We have two errors that are occuring, because of the reference to Bouncy Castle, one of them looks like the CFMAIL error  that others experieneced, however clearing the felix-cache and restarting the instances did not work for us.  In both cases, we are using encryption keys and the code base hasn't changed and worked previously on Update 14.1) trouble with <cfftp><cfftp action="open" server="sftp.********.com" port="22" username="********" key="C:\********\privateKey.ppk" passphrase="********" secure="yes" connection="connFTP" /> This call is now returning the following error message.structCause'argon2' is required, but it is not available.DetailVerify your connection attributes: username, password, server, fingerprint, port, key, connection, proxyServer, and secure (as applicable). Error: 'a

Hi, all. I'm doing an update soon to include a hotfix that references this JVM flag. I'm not a Java guy, so please excuse the question if it is ridiculous, Everywhere I read about this flag on the Web, the purpose is stated something like this: "...this flag prevents ColdFusion from executing pre-compiled CFML code (Java bytecode) at runtime." This confuses me, because ColdFusion works by executing precompiled Java bytecode at runtime, right? It would be very inefficient if it did not. A Google search for the flag indicates such bytecode is in "older" code, but CF's uses precompilation to this day. I've already installed the hotfix on a dev server and my code still works, even when "save class files" is turned on in the CF admin, so I'm guessing this JVM flag only applies to a different kind of precompiled java bytecode. If so, what kind? How might I determine whether there is any of this Java bytecode present in my (large, inherited) application? Thanks!

Did anyone hear anything from CF Team about this ? https://www.cve.org/CVERecord?id=CVE-2025-66516 Resolution suggests updating files to version 3.2.2 from 1.2.x found in CF. Posting here as its flagged critical ? is anyone else also seeing this.

I'd like to restrict Jetty access to the server itself only (CF2021).  I need to do this because the port, 8993, is coming up on a security scan.  I can't use Windows Firewall to block the port (it's complicated, but long story short, it's not an option). I have found two places to do this, I think: [cf]\cfusion\jetty\start.ini## Connector host/address to bind to # jetty.http.host=0.0.0.0 ## Connector port to listen on jetty.http.port=8993I'd change the 2nd line to jetty.http.host=127.0.0.1.  Would this cause any problems?  I did this in my test environment and the server seemed fine.  We don't use Solr; we do use PDF generation, and PDFs still generated after I made this change. [cf]\cfusion\jetty\etc\jetty-ipaccess.xml<Configure id="Server" class="org.eclipse.jetty.server.Server"> <Call name="insertHandler"> <Arg> <New id="IPAccessHandler" class="org.eclipse.jetty.server.handler.IPAccessHandler

Hi Team, Recently, we migrated our application from CF2021 to CF2023. Post-migration, we are facing issues with the <cfhtmltopdf> tag, which is not working as intended. Below is a code snippet, and it is working in CF2021, but the same is not working in CF2023.<cfhtmltopdf encryption = "none" saveAsName = "test.pdf" name="binaryData" orientation = "landscape" overwrite = "yes" > Test PDF Data... </cfhtmltopdf> <cfdump var="#binaryData#">​ CF2021:BalaP_0-1764828563490.png CF2023:BalaP_1-1764828624526.png Currently, the application is running on CF2023 Update 16. Verified "PDF Service Managers" is enabled. Additionally, I cleared the felix-cache, reinstalled the "htmltopdf" package and restarted the services, but no luck still getting the same error.BalaP_2-1764829210610.png What am I missi

I'm currently from ColdFusion 2021 to 2023 and have encountered what appears to be a breaking change in how ColdFusion handles boolean values when interfacing with Java methods and MongoDB operations. The Issue:In ColdFusion 2021, I could pass native ColdFusion boolean values (true/false) directly to Java methods and MongoDB queries without issues. However, in CF 2023, the same code throws errors unless I explicitly cast the booleans using javacast("boolean", true). Example:<!-- This worked in CF 2021 but fails in CF 2023 --> <cfset mongoQuery = {"active": true, "$exists": {"field": true}} /> <!-- Now requires explicit casting in CF 2023 --> <cfset mongoQuery = {"active": javacast("boolean", true), "$exists": {"field": javacast("boolean", true)}} /> 

Hi,i use this code in CF2023<cfscript> params = { field1 = true }; foo(args=params); void function foo(required struct args) { if (arguments.args?.field2) { writeOutput("entra"); } else { writeOutput("non entra"); } } </cfscript>but i receive error Cannot invoke "Object.getClass()" because "x" is nullin first time, after only java.lang.NullPointerException In CF2025 continue with previuos error Am I doing something wrong or is this a bug?

Hi, I am getting the following error message as I try to install the Trial version of ColdFusion 2025 GUI WWEJ Win64 on a Windows Server 2025 (VMware) : "This application has Unexpecedly Quit  Invocation of this Java Application has cause an Invocation TargetException. This application will now exi (LAX)." - The server already has CF2021 installed and I am trying to install CF2025 as a distinct installation.- I have also installed JDK 25 as I thought it was a pre-requisite to have JDK 17 or higher installed but I still get the same error.- I have disabled the Anti-virus hoping that it may help - still get same error message Below are the details regarding the erro message I get: I tried creating a "Package" from the Admin Console (FRL Online) but the zip file I get doesn't get me anywhere... I get a successfull Installation message but CF2025 is nowhere to be found.  Installation sure have changed since I installed CF2021!! ... and not necessaril

Let me start, I do know about the changes in Update 14 related to "extra" arguments, and this is not the same issue, but I think it might be related.  The error is that a paramerter can not be found when making a call to a remote function in a CFC.   Here is the top of the function definition:    <CFFunction name="getTable" access="remote">      <CFArgument name="Datasource" required="yes">      <CFArgument name="Username" required="yes">      <CFArgument name="Password" required="yes"> I am getting an error about " The DATASOURCE parameter to the getTable function is required but was not passed in.".   Where this gets more complicated is that we encrypt all the data in our URL's.  So the call to the CFC looks like:https://server/AgentListPolicies.cfc?EUDATA=... encrypted string .... Then during the processing of application.cfm, we take the encrypted string,

Hi everyone,I’m trying to better understand how install ColdFusion on Linux as a non-root user.From what I know, ColdFusion shouldn’t be run as root for security reasons — instead, it should run under a restricted “runtime user” (for example, cfuser or nobody). However, in our environment, system administrators don’t want developers like me to have sudo or root privileges, even for managing the ColdFusion service (start, stop, restart).Here’s where I’m a bit confused:• What’s the proper relationship between the runtime user that ColdFusion runs as and the user account that manages (starts/stops) ColdFusion?• If ColdFusion is owned by a restricted runtime user, can another non-root user safely manage it?• And how would this work for multiple ColdFusion instances (not just cfusion)?I’d appreciate examples or best practices on how others have implemented this setup — especially on RHEL servers.Thanks in advance for any insight or documentation links you can share!

We are pleased to inform you that we've released security updates for ColdFusion 2025, 2023, and 2021 releases. For more information, see the respective tech notes: ColdFusion (2025 release) Update 4 ColdFusion (2023 release) Update 16 ColdFusion (2021 release) Update 22 The updates address an important security fix related to critical path traversal. View the security bulletin, APSB25-93, for more information.   Download the updates ColdFusion 2025 updates ColdFusion 2023 updates ColdFusion 2021 updates   Docker and CFFiddle CFFiddle is now updated with the changes The Docker images are also updated: Docker Hub - ColdFusion Images Amazon ECR - ColdFusion Images   Please download and apply the updates and provide your feedback.

Hi,I've posted here before.If you've read any of my requests for help, you know I am not a programmer.I have a 10-year-old PC that is about to die.  I have Dreamweaver CS 5.5 installed on it.  Even if I could find my license key (I think I can), I cannot get the install number reset, as Adobe no longer maintains that.I rarely use it, but rely heavily on its ability to help with the code.I cannot afford, or justify, a monthly fee for something I might not use for a month or two.Does anyone have a suggestion for an alternative that is user-friendly for someone like me?Thanks

Typing # gives ## - fine for writing code but not for editing. How do I turn it off. 

I am currently implementing an API using the OAuth2: Client credentials authentication.  The oauth is working to a degree but when after API manager proxies the request to the Coldfusion endpoint, it is removing the authorization header.  Is there any way to preserve the header?  My main reasoning is that I need a way to identify the user on the CF server side after going through API manager.  Thanks in advance.

We would like to inform users that certain previously deprecated features and associated dependencies will be removed in the next bug fix update. This is part of our efforts to enhance security, performance, and modernization.   History  We previously announced the removal of deprecated features before ColdFusion 2025's release. See the following for more information:  Community forum blog  Deprecated features in ColdFusion     What will be removed in the next bug fix update*  Feature  ColdFusion 2025  ColdFusion 2023  ColdFusion 2021  COM/DCOM  Removed  Will be removed in the next bug fix update.  Will be removed in the next bug fix update.   Axis1  Removed  Will be removed in the next bug fix update.    Will be removed in the next bug fix update.    * Tentatively planned for Q1, 2026   Axis1  The web service

Hello all, I am having an issue with ColdFusion 2023 where exporting to Excel only fails when the AppDynamics Java Agent is enabled. As soon as I add this JVM argument -javaagent:C:\AppDynamics\JavaAgent\ver25.6.0.37159\javaagent.jarmy excel export fails and which results: 500 - Internal server error. If I remove that line and restart ColdFusion services, the export works perfectly again.I think the issue here is AppDymanics agent is interfering with ColdFusion's functionality. Has anyone  esle run into this with CF 2023 and AppDynamics, or is there any known conflict between these two? any adivce, tips or shared experience would be really helpful.  Thanks  

We're getting an error running a CF scheduled task. The error says "Attribute validation error for tag CFSTOREDPROC.-It does not allow the attribute(s) DBTYPE.The valid attribute(s) are  BLOCKFACTOR,CACHEDAFTER,CACHEDWITHIN,CACHEID,CACHEREGION,CLIENTINFO,DATASOURCE,DBPOOL,DEBUG, FETCHCLIENTINFO,PASSWORD,PROCEDURE,RESULT,RETURNCODE,TIMEOUT,USERNAME." However there are NO references to DBTYPE in the whole of the code! Other stored procs run on same server same db connection without a problem. cfstoredproc procedure="namehere" datasource="ourdb"Anyone experienced this?

Hi all, I've just purchased a ColdFusion 2025 Standard Edition license, and activated my trial version. From my understanding, it should be valid for one year. However, in the ColdFusion admin panel, the license is showing as valid only until October 20, 2025 which is just three months from now (see screenshot below). Does anyone know if this is a standard issue, or if there might be a problem with the license activation? I've written to Adobe but I'm not sure when I'll get their reply. Any insights would be greatly appreciated! Thanks in advance.Simon  

Hi,In previous CF versions I had TTF fonts registered in "Font Management" for "Barcode Printing" purposes in a cfdocument without issues. The font shows the same name “without spaces” for all 3 options “Font Family”, “Font Face” and “Postscript Name” and I use that name as in-line CSS style to show barcodes on generated PDF’s.Now in CF 2021, I cannot make them work.So far, I have tried:Multiple installs in "Font Management" with different paths, making sure folders did not have user’s restrictions (permissions), using different fonts; and making sure they show as usable in PDF/FlashPaper column.Install font also in Windows.Restart CF Services.Restart physical server.Convert font to WOFF (Shows in browser using CSS @11220649-face / in-line styling) but does not work inside the cfdocument.Any other suggestion to fix this in cfdocument?

Hi,We are experiencing this cache issue, we have 4 instances and one instance, we have this issue, We manually cleared the cache and uncheck all the cache options and restarted the service but still we got issue, Any help would be greatly appreciated<cfquery name="abc" datasource="#xyz#" cachedwithin="#createtimespan(0,1,0,0)#"> 9 : SELECT test_column 10 : FROM tast_table  Error : Cache initialization failed due to following reason: Error configuring from null. Initial cause was Cannot invoke "java.net.URL.openStream()" because "url" is nullStack Traceat cffacilities2ecfm1461612999.runPage(D:/web/live/mercury/view/facilities.cfm:8)coldfusion.tagext.io.cache.CacheExceptions$CacheInitializationException: Cache initialization failed due to following reason: Error configuring from null. Initial cause was Cannot invoke "java.net.URL.openStream()" because "url" is null at coldfusion.cache.ehcache.GenericEhcache.getCacheManager(GenericEhcache.java:418)

Hello Community,I have inheritted some ColdFusion servers (2021). That has been running great so far but recently, I encountered an odd issue with one of the servers. The issue is that the server stopped processing requests on all instances, whether from websites, APIs, etc. I have tried a number of actions to get this server to start processing requests but all actions have been proven futile at this point.Steps I've taken: rebooting the serverresetting the IIS (restart all coldfusion services) recreate the IIS connectors (restart all coldfusion services) Ensure all services are running Upgrading to the latest available patch (22) on all instances Tried creating a new cluster and instance I've given elevated permission to the IIS user (IUSR) for all sites Verified certs Verified Handler mappings I checked all possible logs (server, application, exception, etc) but can't find anything that would indicate the error. Check event mana

I've read the EULA and read notes about the license in the  ColdFusion End User Licensing Agreement (EULA), and my understanding (which may be wrong) is its one license per VM with a maximum of 8 cores.My current cf enterprise is a vmware instance with less than 8 cores has one ColdFusion server running 2 enterprise instances on different ports. Its configured in an HA config and I hae a second server similarly configured usign cluster configuration.I am working through 2 phases of this to migrate 206 to 2023 to AWS AMI,  then once everythig is up and running turn it to a containerized solution using AWS ECS or EKS:1. I'm moving CF 2016 to an Coldfusion 2023 on aws linux with 2-4 CPU with a single core per CPU until I can develop the resource configuraiton for AWS ECS.2. After we migrate the server to the new environment I'll be building a containerized solution where each enterprise intance  will be its own container.Creating the same configuration isn't a problem