Questions

Hello,We are upgrading several machines from CF2021 to CF2023 and are seeing a consistent issue with each upgrade as we go in and try to turn on our ActiveMQ Gateway Instances.  The instances won't start and they are throwing what appear to be java JMS errors in the exception logs.  For instance:"Error","Thread-30","05/14/25","09:26:32","","Failed to start gateway: null""Error","Thread-30","05/14/25","09:26:32","","Error starting gateway <Name of Gateway Instance>: null"java.lang.NullPointerExceptionat java.base/java.util.concurrent.ConcurrentHashMap.putVal(ConcurrentHashMap.java:1011)at java.base/java.util.concurrent.ConcurrentHashMap.put(ConcurrentHashMap.java:1006)at java.base/java.util.Properties.put(Properties.java:1301)at java.base/java.util.Properties.setProperty(Properties.java:229)at examples.ActiveMQ.JMSConsumer.start(JMSConsumer.java:58)at examples.ActiveMQ.JMSGateway.startGateway(JMSGateway.java:47)at coldfusion.eventgateway.GenericGateway.start(GenericGatew

I currently have a jQuery ajax call to a third-party API, which checks a vehicle's licence plate against a national database: $.ajax({ type: "get", url: "https://test.carjam.co.nz/a/vehicle:abcd", data: {key:key,plate:plate}, dataType: "json", success: function(res){ // display message validating license plate and save response data into database } // other code }); However, the third party now requires the call to be from the "back end", as any attempts to use browser code such as JS or juery will result in a "cross-origin" related error. What would be the most effective way to bring this into the back-end? Via a cfc?They also give the option of using node.js, which I know nothing about.

While its vulnerabilities are still mostly relevant towards newer versions of ColdFusion, DISA has now sunset the Adobe ColdFusion 11 STIG as it has not seen an update since 26 Jul 2021. Is there any hope at all for Adobe to work through the vendor STIG process for the newest iterations of the software? Reference: https://public.cyber.mil/stigs/downloads/Reference: https://public.cyber.mil/stigs/vendor-process/

Hi everyone, I’m encountering a recurring issue with ColdFusion 2023 (Update 13) specifically on our PROD DMZ server. We have six ColdFusion servers across different environments — DEV, ACPT, and PROD — each with internal and DMZ configurations. Interestingly, this issue is only occurring on the PROD DMZ server; all other environments, including PROD internal, are functioning normally. The issue is reflected in the Windows Event Viewer, where I’m seeing repeated entries like this: The description of the error is: The description for Event ID 0 from source ColdFusion 2023 ODBC Server cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. ColdFusion 2023 ODBC Server@LOCALHOST, ErrorCode=2310, ErrorMessage=TCP/IP, connection reset by peer This seems to indicate that the ODBC Server is attempting to communicate over TCP/IP but the connection is being reset,

I am using ColdFusion 2023 - Enterprise  Every couple of weeks the ColdFusion Launcher Application will go up and max out the CPU on the server.  Site will then begin to timeout.  Restarting the ColdFusion server services is required to resolve the issue. The configuration for the server is: CF Server: ColdFusion 2023 Enterprises RAM: 16 GBServer: Windows Server 2022 Standard

My company has just notified me of security vulnerabiltiy CVE-2025-31651 which was recently reported.  The vulnerability appears to affect Tomcat versions 9.0.0.M1 through 9.0.102 and the only mitigation seems to be updating to version 9.0.104 or later.Does anyone know if Adobe has plans for a CF2023 to update Tomcat in order to mitigate this vulnerability? Thank you!

I have an AWS EC2 instance built from a Marketplace AMI Coldfusion (2023) Update 11 on hardened AWS Linux with ColdFusion Enterprise Lincense (built around Nov 21 2024)I applied the U12 hotfix (on Apr 8, 2025) and users are reporting an error (see attached) stating that we have a developer license on the server.I applied the U13 hotfix (on Apr 17, 2025)  and the error is still occurring. If anyone has seen this issue or knows of a fix, please help!

We are pleased to inform you that we've released security updates for ColdFusion 2025, 2023, and 2021 releases. For more information, see the respective tech notes: ColdFusion (2025 release) Update 1 ColdFusion (2023 release) Update 13 ColdFusion (2021 release) Update 19   These updates resolve several critical and important vulnerabilities that could lead to arbitrary file system read, arbitrary code execution, and security feature bypass. View the security bulletin, APSB25-15, for more information.   Download the updates ColdFusion 2025 updates ColdFusion 2023 updates ColdFusion 2021 updates   What's new in the updates New JVM flags Refreshed add-on installers IP filtering for cfhtmltopdf Central Configuration Server changes cfencode removal for the 2023 and 2021 updates   Others Bug fixes Known issues   Docker and cffiddle Will be updated shortly. We'll update the post.   Please download and apply the updates and provide your fe

I'm getting an error while trying to upload files. This works fine on our Production server, but the development server is where I'm getting the error. Both servers are running Coldfusion 2023 Update 13 on Windows Server 2022. Attached is an example of the error I'm getting. I'm unsure what to check for here.

Just patched to CF2021 patch 19 and now htmltopdf does not work. In the logs I am seeing Caused by: java.lang.ClassNotFoundException: coldfusion.document.DocumentScope not found by htmltopdf [37] I've tried downgrading back to patch 18.Uninstalling and reinstalling htmltopdf package.Uninstalling and reinstalling all the packages.Upgrading back to patch 19.and numerous reboots. The patch notes includeSometimes, you are unable to create a PDF due to PDFg service authentication failure. As a workaround, update the service manager and retry creating the PDF.What does this mean? What service manager and how do I update it?

I just heard of a guy who ran his website from a computer at home and thus avoided having to deal with the issues of shared hosting. Apparently it worked great for him. Has anyone done this before and what would be involved for a coldfusion website? 

After applying CF2021 Update 19, the add-ons would no longer start, so I reinstalled them to resolve the issue. Unfortunately, SOLR reverted back to 7.2.1. I attempted to upgrade to 8.11.3 manually by following "Upgrade SOLR in ColdFusion" steps (https://helpx.adobe.com/coldfusion/kb/upgrade-solr-security-coldfusion.html), but it has not been successful. Can someone provide guidance or possible work-around?Side note: There was no "managed-schema.xml" within the Solr 8.11.3.zip provided on the from the upgrade page.

Post a brandnew CF2025 in Ubuntu linux 22.04.1 installation unable to start the server, I have selected the installation as Developer mode and Developer Profile. Setup an apache2 connector. I am unclear if I should provide the sudo password when promted or the CFIDE admin password as in older versions CF2021 for instance which always required elevation. myuser@myhost:/opt/coldfusion/cfusion/bin$ sudo ./cfstart.shStarting ColdFusion 2025 server ...Your account has expired; please contact your system administrator.su: Authentication failureThere has been an error starting ColdFusion 2025 server, please check the logs.I can't find the logs in /cfusion/logs folder either. Any ideas? 

Hal Helms, one of ColdFusion's great gurus since the very beginning of the language, passed away two days ago. This sad news was shared by fellow ColdFusion guru, John Quarto-vonTivadar, on https://cfml.slack.com/    I remember Hal Helms. I became familiar with the name within weeks of starting to learn ColdFusion more than twenty years ago.    As a good parent conveys something enduring that sustains the child for life, so does  a good teacher convey something enduring that sustains the learner for a lifetime. Hal Helms was one such teacher. My gratitude to him is immense.Condolences to John Quarto-vonTivadar and to Hal Helms' family.

Impacts: ColdFusion 2025 Update 1 In Package Manager: Settings: Notification, there are two email fields:If updates are available, send email notification toIf updates are available, send email notification from Most of the new gTLDs are not allowed and a popup window appears stating that "Following email IDs are not in valid format:' For a list of the new gTLDs see https://tld-list.com/tlds-from-a-z

I am having trouble uploading files after migrating the site from local environment to the web. Following is the relevant section of code from a coldfusion function that uploads files using BlueImp: <cffunction name="POST" access="private" returnformat="json"> <cfargument name="options" type="struct" required="true"> <cfargument name="listing_id" type="any" required="false" default=""> <cfset var result = 0 > <cfset var vThumbnail = 0 > <cfset var fileInfo = "" > <cfset var fileName = "" > <cftry> <cfset fileInfo = GetFileInfo(form['files[]']) /> <!---<cfdump var="#fileInfo#"><cfabort>---> ...In my local environment, selecting a file produces the following, which is a dump of the form variables used by the function:LOCAL DEV ENVIRONMENTThen BlueImp does its thing via the POST function shown above and the <cfdump var="#fileInfo#"&gt

Hello, everyone. After installing Patch 7 of ColdFusion 2023 on an existing application, the CFLOCATION tags stopped redirecting. It was redirecting properly until Patch 6. The page indicates a status code 302 in the 'network' tab of Google Chrome and shows that the next page loaded, but visually, it seems as if it didn’t load. Has anyone experienced this and knows how to solve it? Thank you all for your help.

Hi,I am receiving the error message: "The getSpMetadataForAdmin method was not found." when I click on an existing SP to edit it. I also get the message when I add a new SP. It adds the SP but then throws the error when try to display it. Adding and editing an IDP is fine. I am on CF 2021 Standard. I upgraded to update 12 from 5 and changed the JVM to 11.0.26 and uninstalled and reinstalled the SAML package to try to fix this but I still get the error. It seems manually modifying the neo-saml.xml file does not work either without restarting CF, but that is still unclear. Has anyone else experienced this or know how I can fix it?Thanks,Dom

This server is running ColdFusion 2021 Update 18. I'm attempting to edit an existing Service provider in the SP Configuration section of the Administrator. the page throws the following error in the Application log:  "Error","http-nio-8544-exec-5","04/17/25","08:40:48","cfadmin","Variable KEYSTOREPATH is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 487"and a similar error in the coldfusion-out log: "Error","http-nio-8544-exec-5","04/17/25","08:40:48","cfadmin","Variable KEYSTOREPATH is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 487"When I orginally configured this the keystore entry was present. The configuration works, our developers are able to write code against the SP Config, but editing it is not possible. 

My CF2021 box is failing security because even though I have uninstalled the search module from CFAdmin, Jetty itself is running an old version of SOLR inside Lucene.  Here's how I know this: GET http://server:8993/solr/admin/info/system HTTP/1.1 Under lucene: lucene-impl-version=7.2.1 b2b6438b37073bee1fca40374e85bf91aa457c0b - ubuntu - 2018-01-10 00:48:43 lucene-spec-version=7.2.1 solr-impl-version=7.2.1-SNAPSHOT unknown - Administrator - 2022-07-19 19:20:55 solr-spec-version=7.2.1 Is there a way I can disable lucene?  It looks like it's used for indexing/searching, and I have no use for it.

I recently upgraded from Coldfusion 2021 Update 9 to Update 18. I used the package manager to install the update and now I'm getting the message"The Administrator module is not installed". This wasn't an issue on our test instance, but for whatever reason this happened in our production instance (lucky me). The service seems to be running. I just can't get back to the adminstrator site. I tried running the "install administrator" command on CF_ROOT/bin/cfpm.bat but it gives me the following message: "The package adminstrator is not found in the repository."

Hi,Can anyone recommend a 3rd party which I can hook into my webstore to calculate sales tax based on address? I am currently looking at informatica.com and taxjar.comThanks!- Shawn

Hello all,I have been looking to see if there is an answer to this or a "How To" but haven't found one.We have CF 2021 Update 17 web server up and running.We want to move to 2025Is there a way to do an inplace upgrade?On my test box when I run the 2025 install, it doesn't take notice of CF 2021 being installed and running so it just tries to install another instance of CF.So is it possible to upgrade or "migrate" during install?

After applying CF2021 Update 19, the following three services failed to start:Add-on ServicesODBC AgentODBC ServerI was able to get the add-on working again by reinstalling it, but the ODBC services are no longer working. I even rolled back to update 18 and ODBC services are still failing to start. Any guidance with this would be greatly appreciated.  

I wana download Coldfusion 2018, just In my local dont wana make it into the server.Please provide me download link.Its very Important.....