ColdFusion

Do we know if ColdFusion, any supported version, is affected by the just released Spring Framework vulnerability,https://tanzu.vmware.com/security/cve-2022-22965? I need to provide updates to my InfoSec team, Phil

I am deploying a Docker image running Apache on top of Coldfusion to Azure App Service. I am unable to connect to the App Service Coldfusion Server from the Performance Monitoring Tool running on another machine.Can I connect the server to port 80/443 rather than 8500 port? Thanks!

Is there any sort of remaining log4j issue with the newest version of ColdFusion 2021? Either vulnerability or is the version of log4j included EOL?

 I’m trying to output data in the form of a grid pattern using coldfusion or MySQL . When I execute the code below, it outputs it in the regular drill down format. I Want to see if there’s a ColdFusion method and or a MySQL method that will allow my data to be out in a grid-like format With each row having a different person and each column having the results for that particular person in the row over a period of time. Please see the attached code and please also see the attached desired output. I am trying to see how I can get the desired results to look like the second image. Is it an array function in ColdFusion that I would need to do that in? Attached code: Regular output desired output 

We are running into an issue of Coldfusion looking for java in the wrong place.For some reason in the 2021 container, coldfusion is looking for java in `/opt/coldfusion2021/jre/bin/java` ,but it actually exists at `/opt/coldfusion/jre/bin/java`.I've tried setting the JAVA_HOME variable to `/opt/coldfusion/jre/bin/java` in the Dockerfile, through a .env file, and through docker-compose's environment key.I've also tried building the containers individually and running them with the -e (extra vars) flag where I set the env var.The question is:Where is the default JAVA_HOME set in the coldfusion configs? Any help will be greatly appreciatd.  Thank You, 

Hi,( ColdFusion Server Developer 2016,0,11,314546  )Consider:<cfcomponent> <cffunction access="remote" name="getDCR" output="false" returntype="string" returnformat="JSON"> <cfset var graphresultset= "" /> <cfquery datasource="datasouce" name="dcr"> SELECT [FINANCIAL_YEAR], DATE_FIELD, COUNT(*) as DCR_Count FROM XXXX WHERE YYYYY GROUP BY P.[FINANCIAL_YEAR], P.DATE_FIELD ORDER BY P.DATE_FIELD </cfquery> <cfreturn graphresultset> </cffunction> </cfcomponent> that returns:"COLUMNS":["FINANCIAL_YEAR","DATE_FIELD","DCR_COUNT"],"DATA":[["FY19/20","July, 01 2019 00:00:00",127],["FY19/20","August, 01 2019 00:00:00",2740],["FY19/20","September, 01 2019 00:00:00",4140],["FY19/20","October, 01 2019 00:00:00",4154],["FY19/20","November, 01 2019 00:00:00",3653],["FY19/20","December, 01 2019 00:00:00",3521],["FY19/20","Jan

I installed ColdFusion update 14 and all of my ColdFusion websites ( except the administrator website ) return a 403. Please help. This is a WIndows Server 2012 ColdFusion 2016 build. Re-installing is not an option. I have removed the update for now until I can find a solution. HTTP Status 403 – ForbiddenType Status ReportDescription The server understood the request but refuses to authorize it.Apache Tomcat/8.5.42

Does anyone know if the zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) that was announced on 12/9/2021 will affect ColdFusion version 10 and 2018?

I am using coldfusion 10 and IIS server 7. I am getting some issue like. website sometime being blank page and I restart the coldfusion service in windows machine then it starts working. please help me to resolve the issue.

I'm getting “java” cannot be opened because the developer cannot be verified when I try to install coldfusion 2021. I am on Mac OS 11.3.1 (Coldfusion 2021 is supported on Mac OS v 11 according to this https://helpx.adobe.com/pdf/coldfusion2021-support-matrix.pdf ) I go to system preferences > Security & Privacy - it says "java was blocked from use because it is not from an identified developer" I click Allow Anyway but then cf installer says "Adobe ColdFusion 2021 quit unexpectedly." - I click Reopen and then get "The file can’t be found." ColdFusion_2021_GUI_WWEJ_osx10.dmg is the file I got from the downloads page. Can anyone from Adobe help me at all please?

After installing CF2016 Updater 17 (up from Updater 11) and going through the directions from Updater 14, I cannot access the Administrator.  The password reset feature does not work either.  I can access the admin by updating the neo_security.xml file and setting admin.security.enabled = false.  Should I try uninstalling the updaters and re-installing?  

Hola, alguien sabe como resolver el problema de Coldfusion 2018 no inicia.Al momento de iniciar Coldfsuion 2018 application server me manda un mensaje que menciona que no se pudo iniciar en e equipo local. Ya detuve los demas servidores y aun asi sigue sin iniciarlo.

Hi. If you happen to know where I can find the 2016 CFML language reference PDF, please can you point me to it? I have Googled and browsed and can't find this particular document. It must have existed!The current online docs are too "advanced" and I need the specific 2016 version. Thanks in advance.Gary.

Hi,There used to be a ColdFusion developer version that we could download to use for development. Is that still available? if so, do you have a link?

When I try to install ColdFusion 2021 developer version, I get the message “libjvm.dylib” cannot be opened because the developer cannot be verified.  No matter how many times I click "Allow Anyway" in Security & Privacy, the same message occurs. I can't get by this block. What can I do to complete the installation of ColdFusion 2021?

Tengo un problema con la configuración de Coldfusion 2021, ya configuré mis datasource de Microsoft Sql Server y la verificación de los mismos es EXITOSA, el problema viene cuando hago la modificación del "virtual directory", dentro del archivo server.xml ubicado en: C:\ColdFusion2021\Mi_Instancia\runtime\conf, mi Context queda de la siguiente manera: <Context path="/app" docBase="C:\ColdFusion2021\Mi_Instancia\wwwroot" WorkDir="C:\ColdFusion2021\Mi_Instancia\runtime\conf\Catalina\localhost\tmp"></Context>Cabe señalar que esto me ha funcionado desde Coldfusion 2011 y Coldfusion 2018.Cuando hago la modificación del Contexto de mi aplicación e intento ingresar me devuelve un error diciendome que no tengo instalado el paquete de Sql server.Error:El paquete de Sql Server si lo tengo instalado: El error surge solamente después de hacer la modificación del Context en mi server.xml. Espero alguien me pueda apoyar a encontrar una solución a esto. Gracias.

I'm getting "The app can't run on your PC" anytime I try install the CF 2018 update 13 on my Win2019 Server.  How does one go about this issue. I'm running CMD as an admin, I've enabled all admin security on the group policy but still the same issue. See attached document

Has anybody developed any AI/ML applications on Azure Cognitive Services API?  I'd be interested in hearing your experiences, and , seeing some example of your code for connecting if you're willing to share. Best regards,Ronnie 

Hi, guys...I've found imageGetExifMetadata for extraction.Now, I'm trying to figure out how to edit an image's meta data.Can CF do that, itself?If not, anyone have a solution?Thanks for any assistance!Rick

Hi Experts,I am trying to send billing information to  -  pilot-payflowlink.paypal.comand I am using AJAX call to do that, $.ajax({      url : "https://pilot-payflowlink.paypal.com",      headers: {          "Content-Type": 'application/x-www-form-urlencoded',          "accept": "application/json",          "Access-Control-Allow-Origin":"#HostAddress#"      },      type: "POST",      crossDomain: true,      Accept: "application/json",      async: true,      contentType:false,      processData: false,      data: data,      cache: false,      success : function(data) {            alert("Posted Successfully!");          alert(data);          con

Looking for some help in configuring ColdFusion 2018 Enterprise to support FIPS 140-2 encryption with backend Oracle database. Searching thru Google, I have not found a complete answer. What I found so far is I need to update the JVM java.security file as well as the ColdFusion jvm.config file and maybe even the data source JDBC URL. Any assistance would be appreciated.Application Server: ColdFusion 2018 Update 13Java: Java SE Development Kit 11.0.14 (64-bit) Updates to java.security file:security.provider.1=com.rsa.jsafe.provider.JsafeJCEsecurity.provider.2=com.rsa.jsse.JsseProvider Update to jvm.config file:-Dcoldfusion.enablefipscrypto=true

All, What can I do to get a proper fix from Adobe?   Ok I am looking to get a particular fix from Adobe.  https://tracker.adobe.com/#/view/CF-4211391I find a link to click in the bug tracker by Charlie, I get "Access Denied" Sent email to Adobe back in 12/20/2021.  Adobe provides a link, but cannot ever download it.  It always results ina no-click.mil error.  Should I re email cfsup@adobe.com email... Apologies, I just dont know why Adobe doesnt provide the fix for Everyone... why lock it down since that error has shown up more than a year ago? The log4j 2.x Update 3 should have included this... What can I do? Thanks"Tired of so secure you cant do your job"

Setting up a couple new Coldfusion 2018 servers and will be using clustering for the first time and have run into some problems.I am having trouble with session replication. Basically, session variables appear to be replicated between nodes in a cluster but are killed after a short while at random.A little setup info:2 web servers (Windows Server 2012) behind load balancersOn each web server sits a Coldfusion cluster consisting of 2 local instances (still unclear if this is useful or not - will ask in separate question) and 2 remote instances (the remotes reference the local instances of each opposite server)For simplicity, currently just testing on a single server with local Coldfusion instances - leaving the remotes out of the equation until I can get things working reliably locallyUsing J2EE session variablesColdfusion session timeout set to 2 hoursHere is what I did/experienced:We have a web application that requires login and stores user information in the session upon login.I mad

<cfscript> message = []; test = true; response = test ? ['It is true'] : ['It is not true']; </cfscript>CF2021 Throws the following error: ColdFusion was looking at the following text:<p>:</p><p>The CFML compiler was processing:<ul><li>A cfscript tag beginning on line 1, column 2.</ul> Used to work in CF2016 Patch #17

Hello all, I just downloaded the free CF2011 developer version and also SQL Server 2019 developer version both to my laptop. My Laptop is running windows 10. I tested my CF 2011 is working and also my MSSMS is working, created a test database, tables.When launching MSSMS I think by default the Connect to Server Windows is set to Windows Authentication. All I need is to click the connect button and I'm connected to the SQL SERVER. Now that I need to create a datasource from my CF administrator I have an issue. After I fill in the CF Datasource name, Server name, Database name and the default port 1433 error show up in red after I clicked the submit button:Connection verification failed for data source: TestDBjava.sql.SQLNonTransientConnectionException: [Macromedia][SQLServer JDBC Driver]Error establishing socket to host and port: MYOWNPC:1433. Reason: Connection refused: connect Do I have to uninstall SQL server and re-install it as I wasn't sure if I have to provide a usernam