ColdFusion

We patched our CF2021 server with update 3 to mitigate the issue in log4j so now we are on 2.16.0.However, it appears 2.16.0 still contains the denial of service vunerability (CVE-2021-45105 ) according to this document:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105 Is CF still vunerable? 

Hello, we can't add collections in CF 2021 Update 2. It was working until we made the update. Now we reveice this message:  org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException Any ideas what the problem could be? 92006454 [qtp1318180415-125] INFO org.apache.solr.handler.admin.CoreAdminOperation - core create command template=/opt/ColdFusion2021/cfusion/jetty/multicore/template&name=test&action=CREATE&instanceDir=/opt/ColdFusion2021/cfusion/jetty/multicore/collections/test&wt=xml&version=2.292006460 [qtp1318180415-125] ERROR org.apache.solr.core.CorePropertiesLocator - Couldn't persist core properties to /opt/ColdFusion2021/cfusion/jetty/multicore/collections/test/core.properties: /opt/ColdFusion2021/cfusion/jetty/multicore/collections/test92006463 [qtp1318180415-125] ERROR org.apache.solr.handler.RequestHandlerBase - org.apache.solr.common.SolrException: Error CREATEing SolrCore 'test': Couldn't persist core properties to /o

The findings of this log4j-1.2.15 and log4j1.2.17 jar files become critical findings now in our scan. The workaround of rename these files do not work because the scan actually looks for the version number inside the manifest file. We hope that there'll be a better solution for this unsupported version.

When are you going to release the log4j 2.17.1 for ColdFusion 2018?   

We have a large corporate license for Adobe Creative Cloud Applications. On our Adobe Dashboard I can create a case or request an Expert Session but does this include ColdFusion? I need immediate and professional help with a major collapes of our ColdFusion configuartions. If I can't get support using our Adobe Dashboard what is recommended for immediate help? Thanks!

Hi, I've been testing out PMT 2021, and am now ready to move into production. The thing is, during testing, I added manually quite a few servers which had incorrect configuration information, and these are now just sitting in the Untracked Servers list (Settings... Server... ColdFusion Servers). I'm looking for a way to clear the list of Untracked Servers in the PMT. I'm sure there must be a way to do this, but I've looked high and low, and cannot find anything. Does anyone have any advice? (FYI, Auto-Discovery is off, and PMT/datastore are running on Ubuntu 20.04.3 LTS). Many thanks in advance!Mike.

Support for CF2016 is coming to a close and as such, I'm looking into upgrading our application to CF2021. Running our application in CF2021, I've ran into multiple issues - some easily fixed, some not so much... the most concerning is the following:  If you have two components, componentA and componentB and both components have a function named the same ( e.g. getID() ) and inject componentB into componentA, if componentB calls the getID() function, it actually calls the getID() function in componentA rather than calling the getID() function local to componentB. Is this a new behavior in cf2021?  

Hello,Here is my query<cfquery name="myQuery" datasource="myDataSource">SELECT *FROM TableWHERE myDate BETWEEN ThisDate AND ThatDate</cfQuery>I wonder if I need to use <CFQUERYPARAM> at WHERE to avoid SQL Injection please?Thanks for adviceHung Pham

Our IT department runs security scans using tenable and they are flagging older versions of log4j on our coldfusion servers.  We are running CF2018 patch 13, and have removed all our old hotfix history - the only older versions of log4j on our server now are log4j-1.2.15 in Coldfusion2018\cfusion\lib and log4j-1.2.17 in Coldfusion2018\cfusion\jetty\lib\ext.  Can we confirm whether or not these versions of log4j are vulnerable, and, if so, if there's any mitigation strategies that we can use to make sure these two log4j versions are secure?  Is there any plan to replace these with log4j 2.17?

Row color displayed in red in CF2016. On migrating to CF2021, it is rendering default color.Please find attached code snippet for your reference.Please help. Thank you.<!--- Create a new three-column query, specifying the column data types ---> <cfset myQuery = QueryNew("Name, Time, Advanced", "VarChar, Time, Bit")> <!--- Make two rows in the query ---> <cfset QueryAddRow(MyQuery, 2)> <!--- Set the values of the cells in the query ---> <cfset QuerySetCell(myQuery, "Name", "The Wonderful World of CFML", 1)> <cfset QuerySetCell(myQuery, "Time", "9:15 AM", 1)> <cfset QuerySetCell(myQuery, "Advanced", False, 1)> <cfset QuerySetCell(myQuery, "Name", "CFCs for Enterprise Applications", 2)> <cfset QuerySetCell(myQuery, "Time", "12:15 PM", 2)> <cfset QuerySetCell(myQuery, "Advanced", True, 2)> <html> <head> <script language="javascript"> var gridName= "WorkListGrid"; var init = function ()

Hi,I have re-installed the ColdFusion 2016 Development versionwith update 16.My all existing Web Service (WSDL) format is changed.Before  :<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:mob="http://mobservice.itcssap"><soapenv:Header/><soapenv:Body><mob:TOKENRequest><mob:valUserName>?</mob:valUserName><mob:valPassword>?</mob:valPassword><mob:valDevUniqID>?</mob:valDevUniqID><mob:valDevName>?</mob:valDevName><mob:valDevPushNotif>?</mob:valDevPushNotif></mob:TOKENRequest></soapenv:Body></soapenv:Envelope>After Re-Install :<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:axis="http://ws.apache.org/axis2"><soap:Header/><soap:Body><axis:TOKENRequest><!--Optional:--><axis:valUserName>?</axis:valUserName><!--Optional:--><axis:valPassword>?</axis:valPassword><!--Optio

I'm trying to get <cfthmltopdf> to work and am having problems.  We're running Coldfusion 11, on Red Hat 7.2.  We've done a fresh installation of CF and are sure that PDFG is installed.Following these steps ColdFusion Help | PDF Generation in ColdFusion , all additional packages are installed on the server except ias32-libs, which my sysadmin tells me does not exist.  Fonts have been extracted in the /usr/share/fonts directory.  I am able to select the 'Verify All Service Managers' button in the CF administrator on the PDF Service page.  The Connection Status returns as OK.I'm trying to run a simple test and am getting an error.<cfhtmltopdf>This is today: #now()#</cfhtmltopdf>Error occurred while generating PDF.coldfusion.document.webkit.PDFgErrorHandler$ServiceManagerConversionException: Error occurred while generating PDF.at coldfusion.tagext.lang.HtmlToPdfTag.handleRetryError(HtmlToPdfTag.java:1509)at coldfusion.tagext.lang.HtmlToPdfTag.han

When I updated Log4j to 2.17 as recommended (https://helpx.adobe.com/coldfusion/kb/log4j-2-16-vulnerability-coldfusion.html), cfhtmltopdf immediately started throwing a generic "server error". Anyone else encounter this? Workarounds? Thanks.

we are using CF2016 which uses log4j 1.2.15 and 1.2.17 versions.  I would like to confirm whether the upgrade of Log4j jar to 2.17 version is still required. Also if we upgrade the jar file to 2.17 will that be compatible with CF2016. 

so one of developers point this out - and it seems not to be updated related.When you get the default error page on CF and under vistor information there is a link "Check Browser"it goes to the following link "https://user-agents.me/test/user-agent-parser") DO NOT CLICK on the link t b basically goes to a dating site (for lack of a better word). I thought this was a result of the recently installed Update 3  but I reverted to a previous snap and does not seem to be the case -  

Hello ,:) I have a problem with my configuration of coldfusion. I have this same error : Thu Dec 23 15:34:05 2021] [6687:140487759288064] [error] ajp_service::jk_ajp_common.c (3021): (cfusion) connecting to tomcat failed (rc=-3, errors=161, client_errors=0).[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] jk_open_socket::jk_connect.c (816): connect to 127.0.0.1:8020 failed (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] ajp_connect_to_endpoint::jk_ajp_common.c (1158): (cfusion) Failed opening socket to (127.0.0.1:8020) (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [error] ajp_send_request::jk_ajp_common.c (1829): (cfusion) connecting to backend failed. Tomcat is probably not started or is listening on the wrong port (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] ajp_service::jk_ajp_common.c (3000): (cfusion) sending request to tomcat failed (recoverable), because of error during request sending (attempt=2)[Thu

Just letting someone @Adobe know there's a typo on: https://www.adobe.com/products/coldfusion-enterprise.html(bottom of page)  

Our SOLR database has records to delete that are best accessed by the CUSTOM2 field.  That field's been renamed to CUSTOM2_I and contains integer values. <cfsearch ...criteria = "custom2_i=32863"> doesn't filter any rows out.I'm hoping there's a syntax that will work. Thank youBrent 

Hello all:I am assigned to clean up or remove some unused tables in our Oracle database.  I have never done it before therefore I am not sure what is best approaching. I asked my DB administrator if we could generate the report from backend that shows the statistics of each table.  The statistics should include the date and time when it hit last time.  He said they "scan" the DB daily, so all tables get hit daily.I wonder if we can approach the task using frontend via ColdFusion.  I wonder if there is anyone out there who has done it before.Thank you very much for your timeHung Phampham_mn@yahoo.com

Hi folks,I need help to get the right group to place my problem.We had several installations of CF2016 ENTERPRISE. Now we migrate to CF2021 ENTERPRISE on new server installation. In CF2016 CFSPREADSHEETWRITE needs 10 sec. to create XLSX file with 3.000 rows and 16 columns.In CF2021 the same code needs 120 sec. to create same XLSX file. I write these problem with detailed documentation to cfinstal@adobe.com at 25th of Nov. 2021 but get no reply.This is a show stopper for go live. I need a hint where is the right place to put this problem? Would be great if anybody can help. Thx in advanced. Stay safe!

It seems after latest updates were applied to my Coldfusion 11 server my XMPP gateway stopped connecting. In my exception log I get:"coldfusion.eventgateway.im.IMGateway$IMGatewayMissingLicenseException: The JBuddy library does not appear to have a license for XMPP".It was working great before the updates.

Why am I getting this error when I've used the wsconfig within my "site-name" folder to bind my site to ColdFusion? It keeps looking for the isapi_redirect.dll inside of wsconfig\2\ instead wsconfig\1\ folder. Where do I look to make this correction?

We've applied the Log4js mitigations outlied in https://helpx.adobe.com/coldfusion/kb/log4j-vulnerability-coldfusion.html and when Update 13 for Coldfusion 13 was available we applied it. I'm now getting warning of a vulnerability for log4j core 2.9.0 installed vi a the mitigation and advised to upgrade to 2.15 or later. Any guidance on either backing out or or upgrading the mitigaation installed via https://helpx.adobe.com/coldfusion/kb/log4j-vulnerability-coldfusion.html to prevent the new vulnerabilities?

How can I check if the Windows Server running ColdFusion is using IIS or Apache? I think we are running IIS since : IIS installedChecked Task Manager and cannot see apache or httpd entries.Looked under cfroot\config\wsconfig\1 and the README file contains : This file was created by the ColdFusion Connector Installer.Do not delete this directory or the files in it because your web serverconfiguration files contain references to the files in this directory.web server: IISweb server version: 10.0IIS web site: All (0) Is this enough proof or are there more checks I can do?

Hello Community - need help badly as I am more of a infrastructure person then coder  We were in the process of setting up SSO with Azure as the identity provider - we had  it working with the simplest of code:  (basically from the Adobe help page)<cfset config = {idp = {name = "ptestidp"},sp = {name = "testsp"},relayState = "cart"}><cfset InitSAMLAuthRequest(config)> since the update I get the following -  line 11 being the call to initialize the azure call  Error Occurred: 12/20/2021 07:48:07 PM     Error Type: java.lang.NullPointerException     Error Message:     Error Detail:     Template: E:\internal\betahost.mycompany.com\pindex.cfm     Line: 11     Column: 0