ColdFusion

Hi,  Tomcat 9 Vulnerabilites- The version of Tomcat 9.0.21 contains security vulnerabilities that are fixed in Tomcat Version 9.0.40 or greater. The latest ColdFusion Update 10 will only update Tomcat to version 9.0.21. Would you please let us know Adobe plans to address these vulnerabilities and when you would it provide Tomcat update to 9.0.31 or later? Thanks!!

I recently upgraded all my domains to CF 2018, and find that the following cftext tag no longer works.<cftextarea richtext=true skin="moono" toolbar="Basic" WRAP=PHYSICAL ID="FormsMultiLine1" style="font-family : Tahoma, times new roman; font-size : 9pt" NAME="copy" height="200" width="550"></cftextarea>See this test page: http://www.natsojtest.org/test.cfm  Note that nothing shows up.I need some help on this asap.Thanks,JRL 

Hi Adobe Community. I need to download the Windows X64 installer for ColdFusion 2016 [target platform is Windows 2016 Datacenter Edition.]I can't find the server installer MSI available for download on the download pages.Could someone please point me at it?Thanks in Advance.David C.Winterman.Elsevier.com

Hi everyone, before I start here is some basic info about our production environment:OS: CentOS Linux 7CF: ColdFusion 2018 (2018.0.10.320417)Java: 11.0.8FusionReactor: 8.5.0Apache httpd: 2.4.6mod_jk: 1.2.46 We have installed ColdFusion 2018 lately and noticed that FusionReactor shows a lot of TIMED_WAITING threads called `pool-<number>-thread-1` which ramp up and don't seem to be closed:since this looks worrying to me I'm here to ask if anyone knows if this is normal behaviour or if we need to take action before our server crashs like this one. I took a look at some thread dumps of these `pool-*-thread-1`-threads but they don't give me a clue where they come frome and what they were supposed to be used for. Example: I don't know much about Java threads yet and thus can not debug this right away. Maybe anyone here has an advice where to start? btw: at first I thought these threads are the ones which are configured in `workers.properties

Is there a way to grab the actual name of a video file located inside of a folder and make it a  variable to be identified within a hyperlink to bring up a pop-up video Modal. I'm Able to do that via a '#URL.id#' with The link to the video pointing to YouTube for Vimeo. I am able to list the names of the files in the video folder via the cfdirectory tag. I am also able to display the videos via cfloop from the video file name outputted from the cfdirectory. What I am trying to achieve is to click on the Video output gallery to bring up a pop up on another page when any video images is clicked on. This is the pop-up page that shows my movies based on a link to YouTube. The link to YouTube is hard coded in my database. <div> <div class="video-block mbr-figure"><iframe class="mbr-embedded-video" src="#video2.evevideofullurl#?rel=0&showinfo=0&autoplay=0&loop=0" width="1280" height="720" frameborder="0" allowfullscreen></i

I accidentally synchronized a Windows CF2018 to CF2021 CustomTags directory and overwrote the CFCs in the "/com/adobe/coldfusion/" sub-directory.  Could someone please post a ZIP file containing these files so I don't have to go through the multiple steps of reinstall CF2021? Thanks.   

Hello, We need help to reset the coldfusion11 admin console password in our linux env.Reading support link, found out that coldfusion11/cfusion/bin/passwordreset.sh can be used. What I would like to know is that, Is this password reset only for admin console or are there any other dependencies to this that we have to update the new password once we reset it so it can continue to work? Since I have taken over this recently from someone who is not there anymore, need advices to get this reset without breaking other stuff and be able to login to the admin console. ThanksSajan 

Is there any way to have the page prompt for data and use that in a where clause?  ponumber = ????

 Good afternoon everybody.Can I migrate version 9 to version 2021? Is there a lot of incompatibility?Version 2021 can be installed on a server with how many cores?Thanks 

I am getting an error when loadng CF Buiklder 2016; The log file states in part:  "Caused by: org.eclipse.core.internal.resources.ResourceException: Incompatible file format. Workspace was saved with an incompatible version: 0."  I have attached the actual log file  Note, I just tried unistalling and then reinstalling CF Builder

We've just gone from ColdFusion 2018 Update 3 to Update 10, and in the process all of the application's ajax calls are returning a 500 error "Parameter validation error for the STRUCTKEYEXISTS function.The function takes 2 parameters." The returnformat on some functions is JSON, on others it's plain. I've searched the application and can't find any instance of StructKeyExists that doesn't have two parameters. I suspect the issue is security related, but this is beyond my level of expertise. Any suggestions?

I can't get out of this dead end. Coldfusion 2016 with all update installed on windows server 2016 (obviuosly 64 bit), I can't use a registered 64-bit dll, which instead used with a simple vbs program correctly. The error reported using cfobject is always the same: An exception occurred when instantiating a COM object. The cause of this exception was that: AutomationException: 0x80040154 - Class not registered. I have checked with every tool and the class is registered, I have granted permission to access "everyone" the directory where the dll is installed.I do not know what to do. Previously the same dll always with coldfusion 2016 (updatet) but on windows server 2012 worked correctly and I could use it through the cfobject Anyone have any suggestions to give me? 

The following error is generated when trying to use cfhtmltopdf function on the page: Error Occurred While Processing Request Error occurred while generating PDF.Reason: Error occurred while handling request.  - the page gets successfully generated if the <cfhtmltopdf> tags are removed- the request generated a lot of data, which is roughly 1200 A4 pages Is there a limit on the file size/number of pages when using the <cfhtmltopdf> tag?

I'm experiencing a problem with CF2018. We would randomly get messages moved into the Undelivr folder, around 4-5 a day. The sample is a message that was actually delivered and received by the recipient but it was logged as below. This has caused much confusion on what is actually NOT sent. Also when we have attachements that fall in the Undelivr folder they cannot be requeued in anyway since the atachment is removed after it gets into the Undelivr folder.  Mail.log:"Error","scheduler-1","02/03/21","14:36:39","","com.sun.mail.smtp.SMTPSendFailedException: 250 2.0.0 113JadXw020604 Message accepted for delivery ;   nested exception is: com.sun.mail.smtp.SMTPAddressFailedException: 550 5.1.1 <test>... User unknown "Mailsent.log:"Information","scheduler-1","02/03/21","14:36:39","","Moved undelivered mail: Mail12193529479958483137.cfmail to D:\ColdFusion2018\cfusion/Mail/Undelivr directory"exception.log"Error","scheduler-1","02/03/21","14:36:39","","com.sun.mail.smtp.SM

Hi,We have a requirement to switch datasources in our application. A cloud app we are developing has a primary and secondary server and it will tell us when the primary is offline and it can call a end-point (.cfm) on our server. If this script updated our neo-datasources.xml on-the-fly with the new datasource information, would this change the DSN reliably? Would it require a server restart? Does it sound viable?I suppose we could also put some code in application.cfc to check the database, but this means we have to change the DSN back again at some time in the future when the DSN for the primary starts working again, so perhaps some scheduled task etc? All sounds a bit too convoluted.We could put a test in our .cfm code to see if the primary database was offline, but that's more code and it has to be in every request, which sounds a bad idea.Any ideas appreciated.Thanks,Mark

I have installed ColdFusion 2021 on a Windows 2012 R2 Server.  When I pull up the ColdFusion Administrator in Internet Explorer (I know, unsupported), there are no links to the subcategories nor are there any icons/buttons in the top right for Information or Logout.  I also tried in Chrome, I get the same problem. I have attached a screenshot that shows what the display is showing.  Note the missing links along the top of the white area, and the missing images and icons in the top black area. I have tried making several adjustments to the browser settings, but no luck. I have also installed the same software on another Windows 2012 R2 Server and do not have the same problems.  Everything is working as expected. Any help or suggestions are greatly appreciated. -Nancy

Hi,I have a legacy API that uses taffy and CF 2018, and I'm posting json with Content-Type: application/json to the API.taffy checks for binary data it gets from getHTTPRequestData().content.  The documentation for getHTTPRequestData says that binary data will be returned if the content type doesn't start with 'text' or if it is "application/x-www-form-urlencoded."   I have confirmed that the data are being posted with Content-Type: application/json, but getHTTPRequestData().content is returning a string.  If I cfdump the string, I see the following which appears to contain a representation of the bytes: {"Code":"\u16a0\u16c7\u16bb\u16eb\u16d2\u16e6\u16a6\u16eb\u16a0\u16b1\u16a9\u16a0\u16a2\u16b1\u16eb\u16a0","CodeID":"515","CodeDescription":"foo"} The Code in the JSON was a test string with ᚠᛇᚻ᛫ᛒᛦᚦ᛫ᚠᚱᚩᚠᚢᚱ᛫ᚠ.Would anyone have any ideas how data might be getting garbled before it gets to the taffy CF application.cfc (which extends the taffy.core.a

 I wanted to reinstall my personal CF server but I have this message:Connection verification failed for data source: H3637zennetjava.sql.SQLException: [Macromedia] [SequeLink JDBC Driver] [ODBC Socket] [Microsoft] [ODBC Microsoft Access Driver] Your application could not start. The workgroup information file is missing or opened exclusively by another user.The root cause was that: java.sql.SQLException: [Macromedia] [SequeLink JDBC Driver] [ODBC Socket] [Microsoft] [Microsoft Access ODBC Driver] Your application could not start. The workgroup information file is missing or opened exclusively by another user.I don't know where it comes from!Thanks for your help.

We are still running CF10 on production servers and was looking for recommendations on companies who could assist with migrating to latest version?  We tried ourselves but couldn't get the sites working.

Hello. We want to improve our legacy CF10 with native Tomcat and I got it working with the latest Tomcat version 9 release a few days ago.. As a challenge, I want to try and make it work with Tomcat 10 but came up with this error ...async.Stockticker@29962b2f') 17-Feb-2021 11:02:48.577 SEVERE [http-nio-8585-exec-1] org.apache.catalina.core.StandardContext.listenerStart Error configuring application listener of class [coldfusion.bootstrap.HttpFlexSessionBootstrap] java.lang.NoClassDefFoundError: javax/servlet/http/HttpSessionBindingListener at java.base/java.lang.ClassLoader.defineClass1(Native Method) at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016).... where can I start troubleshooting this? Thanks!    

OS: Windows 2016 (Azure VM)Version: Coldfusion 2021Command: call c:\ColdfusionX\cfsetup\cfsetup.bat import all cfinst.json c:\ColdfusionX\cfusion Is anyone else having issues importing the sessionCookieTimeout parameters using CFSETUP IMPORT/EXPORT ALL?It was set to  "-1", but came up as "-60" is the JSON file.   I am assuming it is recording the value in seconds.   CFSETUP failes with any number below zero..  

I took this from Access and have used IS NOT.  I took everything out except for "Wal-mart", Changed to Wal-Mart and 'Wal-mart'.  Nothing works unless I take the entire Where clause out.  Any help would be appreciated. WHERE ShipToName NOT ("Wal-Mart" OR "GCC Belvidere IL") AND FOB ="delivered" AND ShipToID Not ("MAN-002" OR "OXN-001" OR "WAT-001")))

Hi, I am trying to find the hotfix file hf201800-4207395.jar. The Adobe ColdFusion support/download page does not have the hotfixes, and CF support have not answered me. Does anyone have the link and/or the file? Thanks,Mark

Greetings, We are running CF18 enterprise(latest update 10) on Windows server.  Tomcat version 9.0.21.0. Java version 11.0.3.Our security team informed us about following vulnerability after Nessus scan on CF server: Plugin ID: 133845 Port: www (8500/tcp)Plugin Output:  Installed version : 9.0.21  Fixed version     : 9.0.31Plugin Description:The version of Tomcat installed on the remote host is prior to 7.0.100, 8.xprior to 8.5.51, or 9.x prior to 9.0.31. It is, therefore, affected by multiplevulnerabilities.  - An HTTP request smuggling vulnerability exists in Tomcat due to mishandlingTransfer-Encoding headers     behind a reverse proxy. An unauthenticated, remoteattacker can exploit this, via crafted HTTP requests,     to cause unintendedHTTP requests to reach the back-end. (CVE-2019-17569)  - An HTTP request smuggling vulnerability exists in Tomcat due to badend-of-line (EOL) parsing that allowed&nb

We are in the process of upgrading from CF11 to CF2018. We are installing it with jdk 11.0.7. When attempting to reach out to another server through cfhttp, it appears to be rejecting the wildcard cert supplied by the destination server. I/O Exception: Certificate for <ourserver.test.local> doesn't match any of the subject alternative names: [*.test.local] The same certs work fine with CF11, so I'm hoping there is some configuration in CF2018 that I have missed.