ColdFusion

I forget what update broke CF Server.  The one where if any variable in any scope is passed to a CFC function, but it's not in the CFARGUMENTS at the very start of the function, then CF throws an exception.I have a .cfc, let's call it "myFunction.cfc", where there is a function that adds a calendar event to a very rudimentary calendar for users to view.  In calling that function via AJaX, I have appended some URL parameters.myFunction.cfc?method=addrecord&returnformat=plain&returntype=plain Someone just tried to enter an event into the calendar.  CF Server sent us an email:Diagnostics:  Function addrecord does not support returntype as an argument in X:\path\to\myFunction.cfcThe error occured on line -1...Template: /path/to/myFunction.cfcQuery String:  method=addrecord&returnformat=plain&returntype=plain returntype is an instruction to the function, not a value being processed by the function. Why did Adobe break this? W

We're currently running a Windows server with CFM 2018 installed and recently developed a new site.  When we push the site to a "live" environment the server runs well for about 20-30 minutes and then it will just fail to respond.  I do see the CFM processor and SQL processor slowly start to increase as the site gets traffic.  I'm guessing it just builds up until it gets bottlenecked or something. The site then fails to respond or gives us the pretty standard CFM error or fails to load any pages and eventually just throws the Tomcat error.  The errors i get are Java heap space and or GC overhead limit.    When we run the site in a "dev" environment it works fine but of course when it's in a dev environment it's only one or two people hitting the site.  The "live" and "dev" site are on the same server, they're just different URL's so there is no difference between the server settings.  Just the number of people hitting the site (public vs private)

I'm moving to a new server running Coldfusion 2025 and have run into an issue when trying to load pages from the server that contain % encoded UTF-8 characters. I get from pages with French characters in a folder/path, e.g. https://www.tourdulactemiscamingue.com/o%C3%B9dormir/, "The server cannot or will not process the request due to something that is perceived to be a client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing)." Apache Tomcat/10.1.42From pages in any folder, accented or not, like https://www.tourdulactemiscamingue.com/o%C3%B9dormir/g%C3%AEtes.cfm or https://www.tourdulactemiscamingue.com/quoifaire/activit%C3%A9saquatiques.cfm I get an error report from Coldfusion saying:"File not found: /quoifaire/activitésaquatiques.cfm" (coldfusion.runtime.TemplateNotFoundException)I've added:1) <system.web><globalization requestEncoding="utf-8" responseEncoding="utf-8" f

ColdFusion Adminstrator 2023 returns a "Failed to add HTML header" error when I try "Export Server State" in the Package Manager.  This happened on Update 14 and continues to happen after Update 15. I made sure (from another thread referring to this error) that "Disable updating ColdFusion internal cookies using ColdFusion tags/functions" under Memory Variables is unchecked as suggested. Any suggestions?

Hi,I am trying to make sure that my Coldfusion Server is optomised to the max and to find out what is normal limits.Basically it looks like at times my servers can run slow but it is possible that this is caused by a very old bloated code base.Jrun can sometimes have very high CPU usage so I purchased Fusion Reactor to see what is going on under the hood.Here are my current Java settings (running v6u24):java.args=-server -Xmx4096m -Xms4096m -XX:MaxPermSize=256m -XX:PermSize=256m -Dsun.rmi.dgc.client.gcInterval=600000 -Dsun.rmi.dgc.server.gcInterval=600000 -Dsun.io.useCanonCaches=false -XX:+UseParallelGC -Xbatch ........With regards Memory, the only memory that seems to be running a lot of Garbage Collection is the Eden Memory Space. It climbs to nearly 1.2GB in total just under every minute at which time it looks like GC kicks in and the usage drops to about 100MB.Survivor memory grows to about 80-100MB over the space of 10 minutes but drops to 0 after the scheduled full GC runs. Old G

Using SendGrid API fails in CF2025: `Error","scheduler-6","08/17/25","13:01:49","","coldfusion.wddx.Base64Encoder$InvalidEncodedStringException: '' Can not decode string "SG". The input string is not base64-encoded.` I did open a bug report:https://tracker.adobe.com/#/view/CF-4227552 Anyone have anyway to get this to work? It's pretty big showstopper if not. 

ColdFusion doesn't work with 'browser history'-- 'window.history.go(-1)'.

Hello,We are migrating Coldfusion from Centos 7.8 [CF2021] to Ubuntu 22.24 [CF2023].I was wondering what are the best methods to export $CF_2021_DIR/jre/lib/security/cacerts and import them to the new server?Is it the via scripts or can just cacerts file be copied over?What is the recommeded way if any? ThanksDejan

Hi, we are looking into better XSS (Cross-site scripting) prevention.We have the "Enable Global Script" protection checked in CFAdminWe have modified neo-security.xml to include a regex to remove various unwanted tagsWe have queryparamed all querysWe are using getSafeHTML() when neededWe are about to go in block mode behind a WAF Does anyone have other recommendations? I couldn't find any recent posts about this in these forums. 

Hello all, I'm currently working on a project using ColdFusion 2023, and I need to programmatically apply Sensitivity Labels to Word and Excel files. I'm not sure how to do this, and I also don't know if ColdFusion have any native integration with the Microsoft Information Protection SDK. My goal is to automate the labeling process for Office documents generated or managed by my ColdFusion application.Here are my questions:Has anyone successfully applied sensitivity labels to Office files using ColdFusion?Are there recommended approaches or best practices for integrating ColdFusion with Microsoft Graph API for this purpose?Is there any Adobe tooling or ColdFusion-native support planned for Microsoft Information Protection? Any guidance, examples, or documentation links would be greatly appreciated!Thanks 

On Thursday, the error below began appearing after the last 2023 coldfusion update on my cfindex code that is atleast 10 years old. I found removing the .dot file extension from my extensions list stopped the error from occurring. However, .docx files will not index now. I tried to uninstall the update 15, although this did not solve the error or the indexing issue  Messagecom.zaxxer.sparsebits.SparseBitSet not found by poi-5.4.1 [36]StackTracejava.lang.ClassNotFoundException: com.zaxxer.sparsebits.SparseBitSet not found by poi-5.4.1 [36] at org.apache.poi.xslf.usermodel.XSLFSheet.<init>(XSLFSheet.java:89) at org.apache.poi.xslf.usermodel.XSLFSlideMaster.<init>(XSLFSlideMaster.java:64) at org.apache.poi.ooxml.POIXMLFactory.createDocumentPart(POIXMLFactory.java:61) at org.apache.poi.ooxml.POIXMLDocumentPart.read(POIXMLDocumentPart.java:671) at org.apache.poi.ooxml.POIXMLDocument.load(POIXMLDocument.java:165) at org.apache.poi.xslf.usermodel.XMLSlideShow.<in

Hi everyone,I’m working on a small food-related project in ColdFusion where I need to pull menu data from an XML feed. The feed has both restaurant names and menu items mixed into one "keywords" field.Here’s a simplified version of the XML:<cfxml variable="menu"><catalog><food id="cs101"><author>Chicken</author><keywords>Chicken Salad Chick, Classic Carol, Lauryn’s Lemon Basil, Cranberry Kelli</keywords></food><food id="cs102"><author>Deli</author><keywords>Subway, Italian BMT, Turkey Breast, Tuna, Veggie Delight</keywords></food></catalog></cfxml>What I’d like to do is just display the restaurant name (always the first value in the keyword string) and ignore the rest.Desired Output:Chicken Salad ChickSubwayFor context, the real data comes from a food blog project I’m building: https://chickensaladchicksmenu.comAny help or code snippet would be awesome 🙏

Our internal vulnerability accessment tool has identified a sever threat (Malware alert) in the coldfusion installation path. We are getting frequent alerts. Just need help from the forum to fix this issue.  • Threat: Backdoor:PHP/Dirtelt• Microsoft Defender Antivirus event code: 1116• Correlation ID: {64391B54-9146-4EF3-A8A5-EF12C4B48492}• Threat outcome: The operation completed successfully.• Microsoft action: Windows Defender: Antimalware platform detected potentially unwanted software ()• Message: "Microsoft Defender Antivirus has detected malware or other potentially unwanted software."• Filepath: :\\COLDFUSION2021\\cfusion\\runtime\\work\\Catalina\\localhost\\tmp\\neotmp10322993890733267903.tmp;file:_Drive path:\\COLDFUSION2021\\cfusion\\runtime\\work\\Catalina\\localhost\\tmp\\neotmp11307734161545627760.tmp;file:_Drive path:\\COLDFUSION2021\\cfusion\\runtime\\work\\Catalina\\localhost\\tmp\\neotmp12158617298315559136.tmp;file:_Drive path:\\COLDFUSION2021\\cfu

I was notified by Cybersource, that they are upgrading and I am required to use the P12 certificate for Authentication with my SOAP API application that has been running for years with Cybersource.I'm using the CFHTTP and added the additional variables to include the P12 cert for Authentication, but I'm receiving an error that HmacPBESHA256 is Not Available.After some research, apperantly CF2021 and its Java JDK Version is 11.0.11 and does not support this agorithum. So, I tried to update the JDK version to 11.0.24, which is listed on Adobes website as being compatabile with CF21. I also updated the jvm.config file to point to the new Home directory for 11.0.24.Now, the CF Application service will not start.I'm hoping someone can provide me some much appreciated help. Thank you!Michael

I have created 2 Javascripts to visualize and hid specific fields. These fields have the properties "hidden" When activating the Java script these fileds become visible, exactly how it should. But when de-activing  a Java script the properties of these fields changes from "hidden" to "visible"  Is this a known issue? Or is there somebody how knows how to deal with this

Team, I understand new install will go separate drive/folder etc.  Also will need run seperate website due to Connector separate instance etc. I know i can share same JDK installation. My question is not clear when documentation says to remove older connector?Shouldn't/I need new connector configured for new website/CF instance? ty  Jose DuenasLead System Admin

I'm using Cold Fusion 2016. I know the ODBC DSN works because I can use Excel to connect to the same AS400 DSN using it.As you can see in the screen shot I can also connect via the C:\ColdFusion2016\cfusion\db\slserver54\tools\ivcheckodbc.exe utility.I've tried restarting, rebooting etc etc.Any ideas? 

Without going into to much detail, we basically have 0 control over anything at my company. So we're resigned to doing manual Coldfusion 2023 updates on our developement machines. On our actual servers we can use the adobe update site.Manual updates seem to have a lot of quirks, so it would be ideal to use the Administrator. Is there a way to point the Update Site URL to a folder to look for updates? It doesn't seem to accept a folder path unlike the Packages Site URL. That still might not work anyway because we don't have local admin access 🙂 Trying to install update 15 through our SCCM we got a bunch of these errors: Exception : Illegal character in opaque part at index 2: C:\ColdFusion2023\bundles\repo/ib6coreutil-1.3.jarI've managed to downgrade myself manually to update 13 but now we're getting the mail error and no amount of felix cache clearing is fixing it. I've also tried setting up the proxy under Package Manager but the error isn't super helpful: 

Initial Assumptions and Red HerringsThe issue began when an application running on ColdFusion 2023 appeared to stop responding. All signs initially pointed to a .NET or database connection issue. This assumption was made based on the browser developer tools, which showed a generic HTTP 500 Internal Server Error, and a complete lack of entries in the event logs. It looked like the application wasn't even starting.Still operating under the .NET assumption, I struggled to gather useful logs. The Failed Request Tracing logs were not showing any information, which I later traced back to missing folder permissions. Once those were corrected, the logs began to populate.Because the failed request log showed a warning related to isapi_redirect.dll, and the ColdFusion page had no logic in it, I changed the file extension from .cfm to .htm to test if the problem was related to ColdFusion execution. Surprisingly, the page loaded correctly, reinforcing the theory.With logs in hand, I saw warnings r

CF 2021 Windows SErver 2022 -- My setting is curring 20 MB i can not change it - i can noty even lower it if i try i get a message that says in admin Important notice about last submissions... BUT it does not give me any notice. If i try to even change 20MB and lower it i get that message. I need to raise this limit. what is the problem?

Hello all,With Code Analyzer scanning our files.  With all it fines.  Is there a way to export all that is found?So you don't have to go one by one through each finding.Thank you.

I have had a nightmare trying for two weeks to get CF2025 installed on a brand new linux server.  I spent 2.5 hours on a call with CFSupport and they could not help me, and in fact made it worse. This has been the worst experience, and I do not think I could ever recommend ColdFusion to anyone despite having used it for nearly 30 years. I don't know where to turn since Adobe themseslves were not able to get it successfully intalled and working as it should be.   I guess I am posting out of sheer frustration and shock at how hard this has been. Also, the documentation for linux installation is absolutely terrible and still has references to older versions and inaccuracies and ommitted steps. I don't know why the ColdFusion team does not care about making installation something that acheivable without knowing lots of obscure and arcane settings.  There are too many moving parts without any clear documenation or trouble shooting guides that are helpful.&

How do I go about updating my cold fusion installtion from CF2021 to the latest version if I have purchased through AWS Marketplace?

I'm trying to increase the Maximum number of POST request parameters field in the CF Administrator console above 100 to accomodate a legacy app that can have over 100 form fields.  The developer edition will let me set any value I want.  The standard edition gives me an error: when I try to increase the POST request parameters above 100.   I suspect CF Administrator is displaying the wrong error message and this is not related to Maximum Pool Size.  That aside is there anyway to increase the POST limit beyond 100 with Standard Edition?  If not, will upgrading our license to Enterprise edition remove this limit?

Trying to wrap my head around this new error I have popping up trying to send an email. This seems to have worked through update 19. I cannot speak for Update 20 because we updated to 20 and then 21 within a few days of each other. I am running the latest approved JVM 11.0.27 from Adobe's site, on Server 2019.  Below is the error I am seeing when I try to send. The page does not end up doing a redirect, but hangs after submit.  Running out of ideas for how to resolve, I have followed another Adobe post but that didn't work either so I reverted back to the old bouncy castle: Solved: CFMAIL Stopped Working After CF2018 Update 14 - Adobe Product Community - 13035484Any suggestions would be welcome, thanks!Jul 10, 2025 12:21:07 PM org.apache.catalina.core.StandardWrapperValve invokeSEVERE: Servlet.service() for servlet [CfmServlet] in context with path [] threw exception [Servlet execution threw an exception] with root causejava.lang.VerifyError: Bad type on operand sta