Questions

Current application runs on ColdFusion 2021 using SAML.  We have setup up the SP and IDP configuration in CF Admin and it has been working for half a year.  Installed ColdFusion 2023 on the same server as ColdFusion 2021.  Used the CFSETUP utility to export and import the spconfiguration as a json file since that doesn't come over when you install and upgrade to ColdFusion 2023.  Verified in ColdFusion 2023 Admin that the SP information was imported and the site is now running on ColdFusion 2023.  I noticed however they keystore in CF2023 is pointing to or looking for it under CF2021 when I try to migrate my application to a new server with just CF2023 installed. Am I wrong to assume that the CFSETUP utility was supposed to create the necessary files from ColdFusion 2021 to ColdFusion 2023 regarding the SAML keystore in addition to adding an entry in ColdFusion 2023?  It seems that if remove ColdFusion 2021 on the same server I installed ColdFusion 20

Subject: Planning CF21 to CF23 Migration in 2026 - Security & Support Concerns?Current Setup:ColdFusion 2021, Version 2021,0,02,328618 (Update 2)Planning to migrate to ColdFusion 2023 in 2026Question: I'm aware that ColdFusion 2021 reaches end-of-life on November 10, 2025. I'm currently running CF21 Update 2 (from September 2021) and planning to migrate to CF23 sometime in 2026.My concerns:What are the security risks of running CF21 after November 10, 2025 with no more updates available?Should I at least update to CF21 Update 22 before the EOL date?Is it feasible/safe to wait until 2026 for the CF23 migration, or should I accelerate this timeline?Are there any compliance issues (PCI, HIPAA, etc.) with running an unsupported CF version?Any advice on the best path forward would be appreciated. Should I prioritize updating to the latest CF21 patch first, or should I fast-track the CF23 migration?Thanks in advance for your guidance!

Hi,I came across something odd while working with ColdFusion 2021 . I have an array of structs representing student data and I'm trying to build a nested struct using arrayEach. Here's the code:<cfscript> arrayData = [ { "name": "Aisha Khan", "age": 21, "major": "Computer Science", "gpa": 3.5, "hobbies": ["coding", "chess", "hiking"] }, { "name": "Liam Patel", "age": 28, "major": "Economics", "gpa": 3.5, "hobbies": ["debating", "football", "photography"] }, { "name": "Sofia Zhang", "age": 20, "major": "Psychology", "gpa": 3.5, "hobbies": ["reading", "painting", "yoga"] }, { "name": "Noah Smith", "age": 23, "major": "Mechanical Engineering", "gpa": 3.2, "hobbies": ["robotics", "gaming", "cycling"] }, { "name": "Fatima Yusuf", "age": 21, "major

When I import the JSON into ColdFusion, the datasource password doesn’t work.The log shows this message:Datasource XXX could not be found. Ensure that you have spelled the name correctly and that the data source is registered in the ColdFusion Administrator Data Sources page.When I go to the datasource screen, without changing the password, and click submit, I get this message:An error occurred while trying to encrypt or decrypt your input string: Input length must be multiple of 16 when decrypting with padded cipher.However, if I enter the password and save it, the error disappears.I’m using Docker.Docker Log:2025-04-01 15:31:02 Import of DATASOURCE, MAIL, DEBUG successful.

First off – thanks for all the fantastic help so far.  Just one last issue to resolve. Can I clear down the input fields once the user presses Submit to update the database?Otherwise if they press the submit button again, it add more (duplicate) records to the database. (my other option if to manage it in SQL code, ignoring duplicate entries) How it works------------------Page displays a variable list of rows, and a field to allow entry of a new date value on each row (as each row may have a different value, or indeed no changes).  Each time a value is entered, we want to create a new “change log” record for that change.example layout :                key     current value    data entry field to allow new value                key     current value  &

Been banging my head against this server for a few days now. We are currently working with ColdFusion 2021 on update 21.While using cfcompile, we received an error concerning jsafe not being found. From what I can find, update 14 phased this encryption out in favor of a more modern standard. The problem I'm finding is I cant get around this error. The jsafejce.jar file is also missign from the coldfusion directory. See below. java.lang.reflect.InvocationTargetExceptionat java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)at java.base/java.lang.reflect.Method.invoke(Method.java:566)at coldfusion.tools.CommandLineInvoker.main(CommandLineInvoker.java:112)Caused by: java.lang.NoClassDefFoundError: com/rsa/jsafe/provider/JsafeJCEat coldfusion.security.Abstr

I am trying to run the ColdFusion 2025 Auto-Lockdown on ColdFusion Update 4. At first it was failing with the following error in the application log: Function getAdminSettings does not support adminpassword as an argument in ...CFIDE\lockdown\lockdown.cfc. I read on the Update 2 page (https://helpx.adobe.com/coldfusion/kb/coldfusion-2025-update-2.html), If you want to apply lockdown on this update, add the -Dcoldfusion.runtime.remotemethod.matchArguments flag. So I did that. Now I am getting a new error: The USERNAME parameter to the getAdminSettings function is required but was not passed in. Are there any other modification or jvm flags I need to add to run the auto-lockdown? Thank you.

Objective------------Creating a new page which allows you to amend dates in a table on the display, which then creates a “change log” in a SQL database table.  How it should work--------------------------Page displays a variable list of rows, and a field to allow entry of a new date value on each row (as each row may have a different value, or indeed no changes).  Each time a value is entered, we want to create a new “change log” record for that change.                example layout :                key     current value    data entry field to allow new value                key     current value    data entry field to allow new value - optional 2nd row     

Anyone else using Sendgrid with Coldfusion 2023? We are using the Sendgrid SMTP API, https://www.twilio.com/docs/sendgrid/for-developers/sending-email/integrating-with-the-smtp-api, and the issue is with the password. They have you create an API key for the password, and the key is 70 characters long in the format  SG.xxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. When entering this as the password in the Coldfusion administrator mail server settings, and doing a test with cfmail, mail.log shows the error "Can not decode string "SG". The input string is not base64-encoded." All we can think is Coldfusion is treating it as a JWT since it has two dots in the string. When entering anything else, we get the normal authentication error in mail.log. Also tried the cfadmin API to set the mail settings and have the same issue. Can you think of a way we could change the way we enter the password in the mail settings? We could always use the Sendgrid Web API instea

I have a internal coldfusion 2023 application running on Windows 2022 server OS with IIS. We have been using MS SQL authentication to connect to the SQL database but organization recently changed policies to use Windows authentication using Kerberos ONLY. I am able to sucessfully connect to the database using NTLM but my org is not accepting NTLM as it is outdated.I went through the online articles followed the steps but I feel like I am missing something that is required for Kerberos authentication. I am able to successfully connect to the same database from a .NET application running on a Containarized application with Kerberos. Below is what I have done so far but no luck in CF 2023Changed the Coldfusion 2023 service to run as Domain account (DEV\userLAN)Changed the Coldfusion 2023 service to run as ServiceAccount (DEV\ServiceAccountName)used SQL JDBC server with integratedSecurity=true in AdvancedSettings under Data Source in AdministratorAlso tried with JavaKerberos as authen

Recently we updated our Coldfusion 2021 server to update 22 and are now getting several errors with packages, we followed the instructions from this post  but still haven't been able to make it work.   First the mail package wasn't installed, we tried to install it via cfpm and Cf admin without success, later we discovered that there were missing dependencies which we manually uploaded to the repo folder, cleared felix cache, both manually and programatically, deleted cfclasses folder.   And finally we were able to install it but still having the same issue also we found out that even though postgresql is installed we get and error saying that the package is not suitable to make the connection and that we should use cfpm to install it,  another error we get is when we use the function Encrypt it gives and error, any advice will help a lot.  

I'm adding service bus integration using the azureservicebus package in ColdFusion 2023 update 16. I can send messages to a queue but I haven't been able to schedule a message for later processing. I've followed the documentation here  https://helpx.adobe.com/coldfusion/using/integrate-coldfusion-azure-service-bus.htmlI've copied the code sample from "Schedule a message" but I get an error every time: "coldfusion.runtime.java.MethodSelectionException: The scheduleMessageToQueue method was not found." Does this method exist in ColdFusion 2023? Here's my simple example:<cfscript> credentialAlias = "AzureServiceBusCredential"; configAlias = "AzureServiceBusConfiguration"; sb = getCloudService(credentialAlias, configAlias); testQueue = sb.createQueue("testQueue"); sendMessage = { messageBody = "This is a test message", messageProperties = { contentType = "text/plain", subject = "Test Message",

Cannot use the data entry field on the page (this must be so basic, but I cannot get it to work)In the extract below NEWVALUE field is not recognised Process :The user selects a case and is taken to another page that displays a list of entries linked to a case (so the number varies each time).They complete an input field to update one or more the entry values.They then press the submit button and the page refreshes with the new values. extract :<cfquery name="table1"...> SELECT ...</cfquery> <cfoutput><input type="submit"><cfform action="page2.cfm"  method="POST" name="FormX">                     <table width="200" border="1" cellspacing="0" cellpadding="2">        <cfloop query="table1">         <tr>       &nbsp

Just upgraded to CF2025 and am seeing this below in the coldfusion-out.log file at random times but almost every minute or more. What is it and what would it be doing.  The only thing i could find with "sentiment" in the file name was this..."\\cfusion\jetty\work\jetty-127_0_0_1-8997-solr_war-_solr-any-\webapp\WEB-INF\lib\sentiment-analysis-parser-0.1.jar". I did google the url in the coldfusion-out.log below and found the github repo for it but dumbfounded why it is showing up in our coldfusion instance.  Oct 13, 2025 13:51:24 INFO [ajp-nio-127.0.0.1-8024-exec-13] - Sentiment Model is at https://raw.githubusercontent.com/USCDataScience/SentimentAnalysisParser/master/sentiment-models/src/main/resources/edu/usc/irds/sentiment/en-netflix-sentiment.binOct 13, 2025 13:51:24 PM Information [ajp-nio-127.0.0.1-8024-exec-13] - Sentiment Model is at https://raw.githubusercontent.com/USCDataScience/SentimentAnalysisParser/master/sentiment-models/src/main/resources/edu/usc/irds/sen

I have a newsletter that gets the title of a post, the first 200 characters, then if there are more than 200 characters, text that says [... more].The title is a link.  I'd like the [... more] text to also be a link, but that is coming from a cfset.Here is the title text ( removed other styling).  I only need the a href part, just including the rest for context:<a href="https://www.pathlabtalk.com/forum/index.php?/topic/#tid#-#title_seo#/" style="font-size: 18px; text-decoration: none; color:##417394;">#ThreadTitle#</a>Here is the [... more] text:<!--- Set output to 200 characters, full words only ---> <cfif len(TopicPost.post) gt 200> <cfset trimmedQuote = fullLeft(TopicPost.post, 200)> <cfset trimmedQuote &= " [... more]"> <cfelse> <cfset trimmedQuote = TopicPost.post> </cfif>Is this possible?Thank you

Does anyone know if there is a PMT 2023, and if so, where is the installer   - i can only find the installer for pmt 2021 

I have followed the instructions and downloaded the CF2025 package. I unzipped it and put it in an accessible folder on my desktop. Each time that I double click on cfinstall.bat, I get the following 2 messages in the install log:2025-10-08 14:43:05 INFO - Welcome to the ColdFusion Setup Wizard2025-10-08 14:43:05 ERROR - Administrator access is required to continue. Exiting... I have a valid Local Account with Administrator privileges. I am the only user of this machine so I have never set up any other accounts. I have read elsewhere that it isn't required to use a Microsoft Account. I had no issue installing previous versions of CF but for some reason I can't install this one. Any ideas?

Hello,I am wondering if anyone could point me in the right direction. I am moving to a new Windows server and upgrading from CF2016 to CF2021, and I can't seem to get my SMS gateway running even though it works fine on the old server. The errors I am getting in my coldfusion-out log when it attempts to start the instance are:"SMSGateway (SMSWatch) Binding to SMSC""SMSGateway (SMSWatch) Bind operation failed: java.lang.NullPointerException"This is the code for the CFC I am using for my instance. I am not sure where it originally came from, but probably from a ColdFusion example:<cfcomponent> <cfset undeliverablePath = "C:\CF21\cfusion\sms\undeliverable" /> <cffunction name="send" output="false" access="private" returntype="boolean"> <cfargument name="username" required="true" type="string"/> <cfargument name="password" required="true" type="string"/> <cfargument name="from" required="true" type="string"/> <cfargument name="to" req

Afternoon folks New build of coldfusion 2025 on Ubuntu. Apache version 2.4.52. On starting the apache service, I periodically get this:Sep 17 16:01:00 intranet01.tectcorp.com systemd[1]: Starting The Apache HTTP Server...Sep 17 16:01:00 intranet01.tectcorp.com apachectl[1813]: Segmentation fault (core dumped)Sep 17 16:01:00 intranet01.tectcorp.com apachectl[1813]: Action 'start' failed.Sep 17 16:01:00 intranet01.tectcorp.com apachectl[1813]: The Apache error log may have more information.Sep 17 16:01:00 intranet01.tectcorp.com systemd[1]: apache2.service: Control process exited, code=exited, status=139/n/aSep 17 16:01:00 intranet01.tectcorp.com systemd[1]: apache2.service: Failed with result 'exit-code'.Sep 17 16:01:00 intranet01.tectcorp.com systemd[1]: Failed to start The Apache HTTP Server. This only happens every few times that I try to start apache. If I try to start it again after the failure, it usually starts without error. Then after a couple of times of st

I installed the PMT for Coldfusion 2018 on my Windows notebook. Everything seemd fine, but each time I want to login, I get the message: "Invalid Username / Password".I am sure that username / password are the correct values configured during installation.Nevertheless I uninstalled the tool and installed it again, using other values for username / password. This did not help.Can anybody help? I did not find any information on this in the internet! 

Hello, We are currently trying to upgrade fuseguard from 2.4 to 3.6.  However , we wanted to see if we can still keep the old one intact and the new one in audit mode or something ,so we just see the logs but nothing gets blocked using the new version. In other words, is it possible to have two fuseguard versions being used or integrated with one single instance of coldfusion 2023. Appreciate if anyone could provide with any inputs based on your experience.Thanks,Manoj.

I just noticed that the Adobe ColdFusion Builder extension for Visual Studio code is no longer avaiilable. Is Adobe moving on to something else?   

Hello everyone, I have an error or detail when reloading with reload. I previously added the mapping in REST, but when I run it, it only shows me {} but it doesn't show me if I reload it or any status. I'm using the developer version CF25. Do you know if this is normal or if I need some other add-on?Regards

Each  time we restart the instance, even without any user traffic at all, cpu will eventually jump to 24-25% and stay there.In some cases this will double, which then makes the site using the instance slow and unresponsiveProblem StatementColdFusion 2023 consuming 20-24% CPU constantly with zero user activityIssue started late September 2025, no configuration changesRestart temporarily fixes it, CPU climbs back within hoursServer: Windows Server, CF 2023, Java 17.0.6, 4 cores, 6GB heapThread Dump Evidence (CRITICAL)"Thread-27" #95 daemon prio=5 os_prio=0 cpu=2798078.13msState: RUNNABLEat sun.nio.ch.Iocp.getQueuedCompletionStatus(Native Method)at sun.nio.ch.Iocp$EventHandlerTask.run(Iocp.java:323)This thread has consumed 2.7 million milliseconds (46 minutes) of CPU time in IOCP polling.Network Evidence The netstat output shows CLOSE_WAIT connections to Akamai CDN that never close, accumulating over time?What I've Ruled OutGC is healthy (gc.log shows normal behavior, 5-15ms pauses)N

Hi All, I updated Coldfusion 2021 to release 21 which is supposed to have Apache POI 5.41, after a Tenable scan I get a Folder that is named WEB-INF-BUE-bk coldfusion2021/cfusion/wwwroot/WEB-INF-BUE-bk/lib that still has the 3.9 libraries, so I'd like to know if I can safely zip the contents and delete the folder without messing the server up or the folder is required by coldfusion?