Questions

Using Coldfusion2023 update13 developers edition.  When I try to update to either update14 or update15, the Oracle package goes invalid.  The package management tool says it is installed, but the Coldfusion engine says that it is not installed and all my Oracle queries fail.  I tried to uninstall Oracle and reinstall with no change to the failing queries.  Even when I tried to rollback to update13, the problem still persisted after updating to either 14 or 15.  Any suggestions to get to the later more secure updates working?  I found some tips, regarding adding more JVM params, clearing some cache stuff, but none of those things helped the Oracle package work again.

i have had 3-4 iis cf sites running for a long time. I went to setup a new iis site. I did not mean this to be a cold fusion site, but when I set it up, it configured it with the cold fusion parameters. My new application is supposed to just be a reverse proxy to point to a Python Windows service. I went to the web server configuration tool in Adobe and found that all the sites were configured under the "all" option. I tried to click that and remove thinking I could add them individually, but I was having a problem and it would not let me. Some sort of permission error accessing some of my ISAPI logs. I then clicked the "Add" button, and I saw the option to add all the sites individually. My thought was, I could add them all individually and then just remove the one I didn't want. That actually worked. However, I'm still left with the 'all' option as well. I'm trying to get rid of the one that says "all", and no matter what I do, it's not working in the web ser

I have several templates in their own Application that I run as CF Scheduled Tasks. Each template has the same basic functionality - call a CFC to make a request to an external API via CFHTTP and save the data in the response to the database using SQL Stored Procedures. All of them run fine with no errors. However, every time just one of these templates is executed, a Request Timed Out message is logged in exception.log, even though the page does not time out and runs to completion: "The request has exceeded the allowable time limit Tag: cfhttp" I am logging each request to log the time it takes to complete and confirm that it completes successfully, and every request completes in about 15 seconds, which is expected. I have added "setting requestTimeout=30;" the CFM template in an attempt to prevent the errors from being logged, but they still do, every time. Any idea what is going on here? I know it's an innocuous error, but, I'd still like to get to the bottom of

Hello Community,Yesterday night, our application (running on ColdFusion 2023) suddenly went down without any warning. The application was not accessible, and all requests were failing. Here’s what we tried so far:Checked logs in GCP (Google Cloud Platform) and also ColdFusion logs.We did not find any clear error messages or indications of why the server/application went down.Finally, we restarted the ColdFusion service, and everything started working again.Environment details:ColdFusion version: 2023Hosting: Google Cloud Platform (VM based)Application was running normally before the incident.Issue:We want to understand the possible root cause of this sudden downtime. Since no clear errors are visible in the logs, we are not sure what exactly triggered the issue. Questions for the community:Has anyone faced a similar issue with CF2023 suddenly going down?Are there specific logs (apart from coldfusion-out.log or exception.log) that we should check in this case?What monitoring o

After applying latest security update the file pathfilter.json is totaly empty!Result: logfiles defined in scheduled tasks cannot be written.The message is:"Warning","main","07/09/25","08:55:31","","The specified path: D:/ScheduleLogs/solr_index_documentatie_website_DEV.html is not allowed for scheduled tasks.To allow it, whitelist the path in cf-root/lib/pathfilter.json against key schedulerexecutionpaths. "IMHO: Totaly disappointing and unacceptable

Hello, I have installed coldfusion 2025 over docker, i have configure everything and import all settings except for one, CUSTOMTAGS it is not working on any way, see image attached, a fresh export cant be imported back, idk if im doing something wrong but it is not even working with a fresh install.this is the export of the cfsetup fordocker-composeservices: cf2025: image: adobecoldfusion/coldfusion2025:latest container_name: cf2025 ports: - "8511:8500" environment: acceptEULA: "YES" importCFSettings: /app/config/settings.json #same error as with customtag.json for customtags section installModules: "debugger,mail,oracle" volumes: - /webdata/coldfusion:/app customtag.json{"CUSTOMTAG":{"/WEB-INF/customtags10000":"/opt/coldfusion/cfusion/CustomTags","/WEB-INF/customtags1755704070605":"/app/shared"}} Regards, Ken

I am trying to uninstall CF2021, while an active version of CF2023 is running. I have tried uninstall from the command line as administrator and right click uninstall as adminstrator, and it just spins. So far over an hour. Do the CF2023 services need to be stopped to uninstall the previous version? Thanks in advance

Scheduler tasks is having issues recognizing "$" in the allowed output paths in pathfilter.json. I was getting warning on server.log and task was not allowed to run:"Attempted to schedule task with unauthorized path: C:/$myPath/**;" After some troubleshooting, removing the $ from the path make it to work again. Issue experienced after recent update to CF2021 update 21. Just sharing...

Greetings,I’m having a problem setting up the server portion of the CFBuilder plugin for VS Code. FWIW, I am running CF2023 using CommandBox on my MacBook Air. What I’m trying to do is set up the sever section of the plugin. In the local server settings, I enter what I thought was the path to server, but I get the following message: Invalid server home When I go into the terminal and type box server info --verbose it gives meServer Home:/Users/larryclyons/.CommandBox/server/E898FE23BF702162F22CB024B4F4187B-dataTables_CF5090/adobe-2023.0.15.330825which I assume is the path to the server. Or so I thought. I’m not sure what I’m doing wrong in this case, Any suggestions on getting this resolved will be very appreciated. 

I forget what update broke CF Server.  The one where if any variable in any scope is passed to a CFC function, but it's not in the CFARGUMENTS at the very start of the function, then CF throws an exception.I have a .cfc, let's call it "myFunction.cfc", where there is a function that adds a calendar event to a very rudimentary calendar for users to view.  In calling that function via AJaX, I have appended some URL parameters.myFunction.cfc?method=addrecord&returnformat=plain&returntype=plain Someone just tried to enter an event into the calendar.  CF Server sent us an email:Diagnostics:  Function addrecord does not support returntype as an argument in X:\path\to\myFunction.cfcThe error occured on line -1...Template: /path/to/myFunction.cfcQuery String:  method=addrecord&returnformat=plain&returntype=plain returntype is an instruction to the function, not a value being processed by the function. Why did Adobe break this? W

We're currently running a Windows server with CFM 2018 installed and recently developed a new site.  When we push the site to a "live" environment the server runs well for about 20-30 minutes and then it will just fail to respond.  I do see the CFM processor and SQL processor slowly start to increase as the site gets traffic.  I'm guessing it just builds up until it gets bottlenecked or something. The site then fails to respond or gives us the pretty standard CFM error or fails to load any pages and eventually just throws the Tomcat error.  The errors i get are Java heap space and or GC overhead limit.    When we run the site in a "dev" environment it works fine but of course when it's in a dev environment it's only one or two people hitting the site.  The "live" and "dev" site are on the same server, they're just different URL's so there is no difference between the server settings.  Just the number of people hitting the site (public vs private)

I'm moving to a new server running Coldfusion 2025 and have run into an issue when trying to load pages from the server that contain % encoded UTF-8 characters. I get from pages with French characters in a folder/path, e.g. https://www.tourdulactemiscamingue.com/o%C3%B9dormir/, "The server cannot or will not process the request due to something that is perceived to be a client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing)." Apache Tomcat/10.1.42From pages in any folder, accented or not, like https://www.tourdulactemiscamingue.com/o%C3%B9dormir/g%C3%AEtes.cfm or https://www.tourdulactemiscamingue.com/quoifaire/activit%C3%A9saquatiques.cfm I get an error report from Coldfusion saying:"File not found: /quoifaire/activitésaquatiques.cfm" (coldfusion.runtime.TemplateNotFoundException)I've added:1) <system.web><globalization requestEncoding="utf-8" responseEncoding="utf-8" f

ColdFusion Adminstrator 2023 returns a "Failed to add HTML header" error when I try "Export Server State" in the Package Manager.  This happened on Update 14 and continues to happen after Update 15. I made sure (from another thread referring to this error) that "Disable updating ColdFusion internal cookies using ColdFusion tags/functions" under Memory Variables is unchecked as suggested. Any suggestions?

Hi,I am trying to make sure that my Coldfusion Server is optomised to the max and to find out what is normal limits.Basically it looks like at times my servers can run slow but it is possible that this is caused by a very old bloated code base.Jrun can sometimes have very high CPU usage so I purchased Fusion Reactor to see what is going on under the hood.Here are my current Java settings (running v6u24):java.args=-server -Xmx4096m -Xms4096m -XX:MaxPermSize=256m -XX:PermSize=256m -Dsun.rmi.dgc.client.gcInterval=600000 -Dsun.rmi.dgc.server.gcInterval=600000 -Dsun.io.useCanonCaches=false -XX:+UseParallelGC -Xbatch ........With regards Memory, the only memory that seems to be running a lot of Garbage Collection is the Eden Memory Space. It climbs to nearly 1.2GB in total just under every minute at which time it looks like GC kicks in and the usage drops to about 100MB.Survivor memory grows to about 80-100MB over the space of 10 minutes but drops to 0 after the scheduled full GC runs. Old G

Using SendGrid API fails in CF2025: `Error","scheduler-6","08/17/25","13:01:49","","coldfusion.wddx.Base64Encoder$InvalidEncodedStringException: '' Can not decode string "SG". The input string is not base64-encoded.` I did open a bug report:https://tracker.adobe.com/#/view/CF-4227552 Anyone have anyway to get this to work? It's pretty big showstopper if not. 

ColdFusion doesn't work with 'browser history'-- 'window.history.go(-1)'.

Hello,We are migrating Coldfusion from Centos 7.8 [CF2021] to Ubuntu 22.24 [CF2023].I was wondering what are the best methods to export $CF_2021_DIR/jre/lib/security/cacerts and import them to the new server?Is it the via scripts or can just cacerts file be copied over?What is the recommeded way if any? ThanksDejan

Hi, we are looking into better XSS (Cross-site scripting) prevention.We have the "Enable Global Script" protection checked in CFAdminWe have modified neo-security.xml to include a regex to remove various unwanted tagsWe have queryparamed all querysWe are using getSafeHTML() when neededWe are about to go in block mode behind a WAF Does anyone have other recommendations? I couldn't find any recent posts about this in these forums. 

Hello all, I'm currently working on a project using ColdFusion 2023, and I need to programmatically apply Sensitivity Labels to Word and Excel files. I'm not sure how to do this, and I also don't know if ColdFusion have any native integration with the Microsoft Information Protection SDK. My goal is to automate the labeling process for Office documents generated or managed by my ColdFusion application.Here are my questions:Has anyone successfully applied sensitivity labels to Office files using ColdFusion?Are there recommended approaches or best practices for integrating ColdFusion with Microsoft Graph API for this purpose?Is there any Adobe tooling or ColdFusion-native support planned for Microsoft Information Protection? Any guidance, examples, or documentation links would be greatly appreciated!Thanks 

On Thursday, the error below began appearing after the last 2023 coldfusion update on my cfindex code that is atleast 10 years old. I found removing the .dot file extension from my extensions list stopped the error from occurring. However, .docx files will not index now. I tried to uninstall the update 15, although this did not solve the error or the indexing issue  Messagecom.zaxxer.sparsebits.SparseBitSet not found by poi-5.4.1 [36]StackTracejava.lang.ClassNotFoundException: com.zaxxer.sparsebits.SparseBitSet not found by poi-5.4.1 [36] at org.apache.poi.xslf.usermodel.XSLFSheet.<init>(XSLFSheet.java:89) at org.apache.poi.xslf.usermodel.XSLFSlideMaster.<init>(XSLFSlideMaster.java:64) at org.apache.poi.ooxml.POIXMLFactory.createDocumentPart(POIXMLFactory.java:61) at org.apache.poi.ooxml.POIXMLDocumentPart.read(POIXMLDocumentPart.java:671) at org.apache.poi.ooxml.POIXMLDocument.load(POIXMLDocument.java:165) at org.apache.poi.xslf.usermodel.XMLSlideShow.<in

Hi everyone,I’m working on a small food-related project in ColdFusion where I need to pull menu data from an XML feed. The feed has both restaurant names and menu items mixed into one "keywords" field.Here’s a simplified version of the XML:<cfxml variable="menu"><catalog><food id="cs101"><author>Chicken</author><keywords>Chicken Salad Chick, Classic Carol, Lauryn’s Lemon Basil, Cranberry Kelli</keywords></food><food id="cs102"><author>Deli</author><keywords>Subway, Italian BMT, Turkey Breast, Tuna, Veggie Delight</keywords></food></catalog></cfxml>What I’d like to do is just display the restaurant name (always the first value in the keyword string) and ignore the rest.Desired Output:Chicken Salad ChickSubwayFor context, the real data comes from a food blog project I’m building: https://chickensaladchicksmenu.comAny help or code snippet would be awesome 🙏

Our internal vulnerability accessment tool has identified a sever threat (Malware alert) in the coldfusion installation path. We are getting frequent alerts. Just need help from the forum to fix this issue.  • Threat: Backdoor:PHP/Dirtelt• Microsoft Defender Antivirus event code: 1116• Correlation ID: {64391B54-9146-4EF3-A8A5-EF12C4B48492}• Threat outcome: The operation completed successfully.• Microsoft action: Windows Defender: Antimalware platform detected potentially unwanted software ()• Message: "Microsoft Defender Antivirus has detected malware or other potentially unwanted software."• Filepath: :\\COLDFUSION2021\\cfusion\\runtime\\work\\Catalina\\localhost\\tmp\\neotmp10322993890733267903.tmp;file:_Drive path:\\COLDFUSION2021\\cfusion\\runtime\\work\\Catalina\\localhost\\tmp\\neotmp11307734161545627760.tmp;file:_Drive path:\\COLDFUSION2021\\cfusion\\runtime\\work\\Catalina\\localhost\\tmp\\neotmp12158617298315559136.tmp;file:_Drive path:\\COLDFUSION2021\\cfu

I was notified by Cybersource, that they are upgrading and I am required to use the P12 certificate for Authentication with my SOAP API application that has been running for years with Cybersource.I'm using the CFHTTP and added the additional variables to include the P12 cert for Authentication, but I'm receiving an error that HmacPBESHA256 is Not Available.After some research, apperantly CF2021 and its Java JDK Version is 11.0.11 and does not support this agorithum. So, I tried to update the JDK version to 11.0.24, which is listed on Adobes website as being compatabile with CF21. I also updated the jvm.config file to point to the new Home directory for 11.0.24.Now, the CF Application service will not start.I'm hoping someone can provide me some much appreciated help. Thank you!Michael

I am trying to get the PDF manager to work on coldfusion 2025 (developer addition) running on Ubuntu with Apache web server. I did the full GUI install (ColdFusion_2025_GUI_WWEJ_linux64.bin ) select developer addition, all add ons etc. Did no install the separate addons download. So jetty is instslled under cfusion.After installation I can verify the PDF  Manager ( in my case the install changed the port to 8999). Like some other post I have seen I was seeing the unregistered in the log. Selecting edit and saving without any changes allowed me to verify and provided the reghistered log item:May 2, 2025 07:15:06 AM Information [http-nio-8500-exec-4] - PDFg service manager http://127.0.0.1:8997/PDFgServlet/ unregistered.May 2, 2025 07:15:06 AM Information [http-nio-8500-exec-4] - PDFg service manager http://127.0.0.1:8997/PDFgServlet/ registered.I do have it connected to appache anbd the web root is set so in a file called test.cfm I have:<cfhtmltopdf><h1>Hello World<

I have created 2 Javascripts to visualize and hid specific fields. These fields have the properties "hidden" When activating the Java script these fileds become visible, exactly how it should. But when de-activing  a Java script the properties of these fields changes from "hidden" to "visible"  Is this a known issue? Or is there somebody how knows how to deal with this