Connection verification failed for data source: xxxx_jdbc java.sql.SQLException:

Report · Dec 17, 2025

Hi All,

Getting an error i've never seen before on one server of multiple we use to connect to an Oracle datasource via Oracle JDBC Drivers after doing the update from 16 to 17 on CF2023.

Connection verification failed for data source: xxxx_jdbc
java.sql.SQLException: Index -1 out of bounds for length 0

Error when trying to verify a datasource. It's an Other datasource. Using Oracle JDBC Drivers (in the cflib foler ojdbc11.jar). Driver Name: oracle.jdbc.driver.OracleDriver

Have tried removing the datasource and re-adding and get the same result. Have also tried just adding a different oracle jdbc datasource and get the same result.

I've also tried deleting the felix-cache and WEB-INF cfclasses but that doesn't seem to have had any effect.

Strangely this is only happening on one server of multiple we have connecting to the datasource, some of which are on CF2023 Update 16 and some Update 17.

Stack trace has error messages like:

"Error","http-nio-8500-exec-2","12/17/25","11:31:02","cfadmin","Index -1 out of bounds for length 0"

java.sql.SQLException: Index -1 out of bounds for length 0

at coldfusion.server.j2ee.sql.pool.JDBCPool.createPhysicalConnection(JDBCPool.java:762)

at coldfusion.server.j2ee.sql.pool.ConnectionRunner$RunnableConnection.run(ConnectionRunner.java:67)

at java.base/java.lang.Thread.run(Thread.java:833)

At a bit of a loss where to go with this one now so any help gratefully received!.

Coldfusion 2023 Update 17 (only happening on one server of multiple we have updated).

Windows Server 2019

Report · Dec 17, 2025

An odd one, indeed, Nick. And perhaps someone will immediately recognize a known issue and suggest a solution.

Otherwise, before we may start going down many rabbit holes (or folks here start suggesting you just try reinstalling things), I have a couple of potentially important diagnostic questions.

1) Let's focus first on your saying you cleared the felix-cache.

If you did that for the cfusion/bin folder, please confirm whether you might have more than one cf instance installed. That's a feature option with the CF Enterprise, developer, and trial editions (but not CF Standard). If you do, you must remove the felix-cache also for the bin folder of THAT instance.

There are several ways to confirm if you're running multiple instances. Let's see first if you already understand what I'm asking.

2) Finally, have you confirmed there were 0 errors in the update install log, and that all package updates were tracked as downloaded successfully (at the bottom of that update log) and then uninstalled and started successfully (as tracked in the coldfusion-out.log, on the first startup after the cf update)? Again, I could offer more specific details if needed.

Let's hear your initial thoughts in reply.

/Charlie (troubleshooter, carehart. org)

Report · Dec 17, 2025

Hi Charlie!

Many thanks for your reply.

1) This particular server is a Developer Edition of CF2023 (we have others that are Standard Edition and another Developer where this issue isn't occurring). It's a single instance of CF and we have just 1 IIS Website configured to use it. Our install is on the D:\ so the felix cache I deleted was in D:\ColdFusion2023\cfusion\bin\felix-cache the files of course have since been recreated when I restarted CF

2) The install does appear to have been successful. The log file reports.

__________________________________________________________________________

Installed Feature(s) Standard, J2EE of Adobe ColdFusion 2023 Update 17

Install Begin: DECEMBER 17, 2025 7:54:27 AM GMT
Install End: DECEMBER 17, 2025 8:01:49 AM GMT

Installed by InstallAnywhere 23.0 Premier Build 6921 (Designer/Runtime: Private Hotfix B)

User Interactions
-----------------

#Choose ColdFusion 2023 Home directory
#--------------------------------------
USER_INSTALL_DIR=D:\\ColdFusion2023

#Install
#-------
-fileOverwrite_D\:\\ColdFusion2023\\notice.txt=Yes

Summary
-------

Installation: Successful.

603 Successes
0 Warnings
0 NonFatalErrors
0 FatalErrors

One of the servers we have working successful the install log file looks the same with 603 successes.

The coldfusion.out file looks to have the uninstall / successful start as below.

Dec 17, 2025 07:53:17 AM Information [Thread-27] - ColdFusion stopped
Dec 17, 2025 08:01:51 AM Information [main] - Starting logging...
Dec 17, 2025 08:01:51 AM Information [main] - [SerializationFilterManager] Successfully set ObjectInputFilter using Java 9+ standard API (java.io) with logging
Dec 17, 2025 08:01:51 AM Information [main] - Starting SerializationFilter...
Dec 17, 2025 08:01:51 AM Information [main] - Starting license...
Dec 17, 2025 08:01:53 AM Information [main] - Developer Edition enabled
Dec 17, 2025 08:01:59 AM Information [main] - Starting crypto...
Dec 17, 2025 08:01:59 AM Information [main] - Installed JSafe JCE provider: Version 6.21 Crypto-J 6.2.1, EMC Corporation. JsafeJCE Security Provider (implements RSA, DSA, ECDSA, Diffie-Hellman, ECDH, AES, DES, Triple DES, DESX, RC2, RC4, RC5, PBE, MD2, MD5, RIPEMD160, SHA1, SHA224, SHA256, SHA384, SHA512, HMAC-MD5, HMAC-RIPEMD160, HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384, HMAC-SHA512, HMACDRBG, HASHDRBG, CTRDRBG, FIPS186PRNG, SHA1PRNG, MD5PRNG; RFC 3394, RFC 5649 AES Key Wrap; X.509 CertificateFactory; PKCS12, PKCS15 KeyStore; X.509V1, PKIX, PKIX-SuiteB, PKIX-SuiteBTLS CertPathValidators; X.509V1, PKIX, PKIX-SuiteB, PKIX-SuiteBTLS CertPathBuilders; LDAP, Collection CertStores)
Dec 17, 2025 08:01:59 AM Information [main] - Starting security...
Dec 17, 2025 08:01:59 AM Information [main] - Starting scheduler...
Dec 17, 2025 08:02:00 AM Information [main] - Starting WatchService...
Dec 17, 2025 08:02:00 AM Information [main] - Starting runtime...
Dec 17, 2025 08:02:01 AM Information [main] - Starting client...
Dec 17, 2025 08:02:01 AM Information [main] - Starting archive...
Dec 17, 2025 08:02:01 AM Information [main] - Starting CloudConfig...
Dec 17, 2025 08:02:01 AM Information [main] - Uninstalling the package administrator
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package htmltopdf
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package bcmail-jdk15on-153
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package bcpkix-jdk15on-153
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package bcprov-jdk15on-153
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ri_generic-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6https-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6http-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6coreutil-1.3
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-servlet-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-security-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-server-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-http-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-xml-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-io-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-util-ajax-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jetty-util-9.4.51
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package print
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jpedal-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package pdf
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package cf-assembler-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package cf-acrobat-1.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package poi-5.4.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-compress-1.26.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package js-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package xmlbeans-5.3.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package SparseBitSet-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6coreutil-1.3
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jdom-1.1.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jai_codec-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jai_core-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-io-2.19.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jpedal-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package bcpkix-jdk15on-153
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package presentation
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package poi-5.4.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-compress-1.26.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package xmlbeans-5.3.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-io-2.19.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package SparseBitSet-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-math3-3.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-httpclient-3.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-collections4-4.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-logging-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package report
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6coreutil-1.3
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package poi-5.4.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-compress-1.26.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package xmlbeans-5.3.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-io-2.19.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-math3-3.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package crystal-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package jintegra-64.03
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-digester3-3.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package cglib-3.2.6
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-collections-3.2.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-logging-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package document
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package fontmanager-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package unoil-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package unoloader-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package oosdkclasses-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ri_generic-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6https-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6http-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ib6coreutil-1.3
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package iTextAsian-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package iText-cf-2.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package bcmail-jdk14-139
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package bcprov-jdk14-139
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package ccs
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package spreadsheet
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package poi-5.4.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-compress-1.26.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package xmlbeans-5.3.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-io-2.19.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package SparseBitSet-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-math3-3.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-codec-1.10
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-logging-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-collections4-4.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package scheduler
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package quartz-2.4.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package HikariCP-java7-2.4.13
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package c3p0-0.9.1.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package slf4j-api-1.7.12
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package search
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package metadata-extractor-2.8.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package xmpcore-1.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package poi-5.4.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-compress-1.26.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package xmlbeans-5.3.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package SparseBitSet-1.2
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-suggest-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-spatial-extras-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-spatial-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-spatial3d-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-queryparser-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-sandbox-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-misc-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-highlighter-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-memory-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-join-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-grouping-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucenedemo-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-backward-codecs-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-analyzers-smartcn-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-queries-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package lucene-core-analyzers-common-6.6.1
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package solr-solrj-8.11.3
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package solr-core-8.11.3
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package zookeeper-3.8.4
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package zookeeper-jute-3.8.4
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package commons-io-2.19.0
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package slf4j-log4j12-1.7.12
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package slf4j-api-1.7.12
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package websocket
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package slf4j-log4j12-1.7.12
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package slf4j-api-1.7.12
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-codec-http2-4.1.89.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-codec-http-4.1.109.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-handler-4.1.109.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-codec-4.1.89.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-transport-native-unix-common-4.1.89.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-transport-4.1.89.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-buffer-4.1.89.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-resolver-4.1.89.Final
Dec 17, 2025 08:02:02 AM Information [main] - Uninstalling the package netty-common-4.1.89.Final
Dec 17, 2025 08:02:17 AM Information [main] - Starting GraphQLConfig...
Dec 17, 2025 08:02:19 AM Information [main] - Starting VendorCredential...
Dec 17, 2025 08:02:19 AM Information [main] - Starting rest...
Dec 17, 2025 08:02:19 AM Information [main] - Starting registry...
Dec 17, 2025 08:02:19 AM Information [main] - Package adminapi started...
Dec 17, 2025 08:02:19 AM Information [main] - Package administrator started...
Dec 17, 2025 08:02:19 AM Information [main] - Package ccs started...
Dec 17, 2025 08:02:20 AM Information [main] - Package redissessionstorage started...
Dec 17, 2025 08:02:20 AM Information [main] - Package debugger started...
Dec 17, 2025 08:02:21 AM Information [main] - Package zip started...
Dec 17, 2025 08:02:22 AM Information [main] - Package image started...
Dec 17, 2025 08:02:23 AM Information [main] - Package caching started...
Dec 17, 2025 08:02:23 AM Information [main] - Package cfmongodb started...
Dec 17, 2025 08:02:23 AM Information [main] - Package mail started...
Dec 17, 2025 08:02:23 AM Information [main] - Package spreadsheet started...
Dec 17, 2025 08:02:24 AM Information [main] - Package axis started...
Dec 17, 2025 08:02:26 AM Information [main] - Package chart started...
Dec 17, 2025 08:02:26 AM Information [main] - Package feed started...
Dec 17, 2025 08:02:26 AM Information [main] - Package print started...
Dec 17, 2025 08:02:26 AM Information [main] - Package search started...
Dec 17, 2025 08:02:26 AM Information [main] - Package document started...
Dec 17, 2025 08:02:26 AM Information [main] - Package presentation started...
Dec 17, 2025 08:02:27 AM Information [main] - Package eventgateways started...
Dec 17, 2025 08:02:27 AM Information [main] - Event Gateway Disabled.
Dec 17, 2025 08:02:27 AM Information [main] - Package dotnet started...
Dec 17, 2025 08:02:32 AM Information [main] - Package pmtagent started...
Dec 17, 2025 08:02:32 AM Information [main] - Package htmltopdf started...
Dec 17, 2025 08:02:37 AM Information [main] - Package awslambda started...
Dec 17, 2025 08:02:37 AM Information [main] - Package com started...
Dec 17, 2025 08:02:38 AM Information [main] - Package saml started...
Dec 17, 2025 08:02:38 AM Information [main] - Package awss3 started...
Dec 17, 2025 08:02:38 AM Information [main] - Package awss3legacy started...
Dec 17, 2025 08:02:41 AM Information [main] - Package azureblob started...
Dec 17, 2025 08:02:41 AM Information [main] - Package pdf started...
Dec 17, 2025 08:02:41 AM Information [main] - Package websocket started...
Dec 17, 2025 08:02:42 AM Information [pool-51-thread-1] - WebSocket Server listens on port: 8585
Dec 17, 2025 08:02:42 AM Information [main] - Package orm started...
Dec 17, 2025 08:02:42 AM Information [main] - Package ormsearch started...
Dec 17, 2025 08:02:42 AM Information [main] - Package ajax started...
Dec 17, 2025 08:02:43 AM Information [main] - Package derby started...
Dec 17, 2025 08:02:43 AM Information [main] - Package oracle started...
Dec 17, 2025 08:02:44 AM Information [main] - Package mysql started...
Dec 17, 2025 08:02:44 AM Information [main] - Package db2 started...
Dec 17, 2025 08:02:44 AM Information [main] - Package sybase started...
Dec 17, 2025 08:02:45 AM Information [main] - Package postgresql started...
Dec 17, 2025 08:02:45 AM Information [main] - Package sqlserver started...
Dec 17, 2025 08:02:46 AM Information [main] - Package odbc started...
Dec 17, 2025 08:02:46 AM Information [main] - Starting sql...
Dec 17, 2025 08:02:46 AM Information [main] - Package scheduler started...
Dec 17, 2025 08:02:46 AM Information [main] - Package ftp started...
Dec 17, 2025 08:02:46 AM Information [main] - Package awssqs started...
Dec 17, 2025 08:02:46 AM Information [main] - Package awssns started...
Dec 17, 2025 08:02:49 AM Information [Thread-21] - PDFg service manager http://127.0.0.1:8995/PDFgServlet/ registered.
Dec 17, 2025 08:02:51 AM Information [main] - Package azureservicebus started...
Dec 17, 2025 08:02:51 AM Information [main] - Package awsdynamodb started...
Dec 17, 2025 08:02:56 AM Information [main] - Package gcpfirestore started...
Dec 17, 2025 08:02:56 AM Information [main] - Package gcppubsub started...
Dec 17, 2025 08:02:57 AM Information [main] - Package gcpstorage started...
Dec 17, 2025 08:02:57 AM Information [main] - Package report started...
Dec 17, 2025 08:02:58 AM Information [main] - Package exchange started...
Dec 17, 2025 08:02:58 AM Information [main] - Package sharepoint started...
Dec 17, 2025 08:03:00 AM Information [main] - Package graphqlclient started...
Dec 17, 2025 08:03:00 AM Information [main] - ColdFusion started
Dec 17, 2025 08:03:00 AM Information [main] - ColdFusion: application services are now available
Dec 17, 2025 08:03:00 WARN [main] - Unable to determine dialect of the StAX implementation at jar:file:/D:/ColdFusion2023/cfusion/lib/bundleaxis/wstx-asl-3.2.9.jar!/
Dec 17, 2025 08:03:00 AM Warning [main] - Unable to determine dialect of the StAX implementation at jar:file:/D:/ColdFusion2023/cfusion/lib/bundleaxis/wstx-asl-3.2.9.jar!/

Regards Nick.

Report · Dec 17, 2025

Sooooooo! Did some further digging! There are other error messages in the exception.log file.

"Error","Thread-34","12/17/25","08:07:05","","Due to security reasons, oracle.sql.converter.CharacterConverter1Byte is blocked for deserialization. Add the class/package in the file cfusion/lib/serialfilter.txt to override the behavior and allow deserialization."

coldfusion.server.DeserializationException: Due to security reasons, oracle.sql.converter.CharacterConverter1Byte is blocked for deserialization. Add the class/package in the file cfusion/lib/serialfilter.txt to override the behavior and allow deserialization.

at coldfusion.server.SerializationFilterManager$LoggingObjectInputFilterHandler.invoke(SerializationFilterManager.java:93)

As per the install article i've added the below setting in the JVM and restarted the CF Services

-Dcoldfusion.deserialization.safeguard.enabled=false

And that has solved the issue.

However, the other servers did not feed that JVM setting. Going to have to look at what the difference is there!

Report · Dec 17, 2025

Hi @nickb1533966 , kudos for resolving the issue and thanks for sharing the solution.
As you're on the Developer Edition, using the JVM flag -Dcoldfusion.deserialization.safeguard.enabled=false is fine.

I just wish to add that, for security reasons, the flag should be avoided on a production server. In that case, you should add the required class or package in the configuration file /cfusion/lib/serialfilter.txt.
See the documentation at https://helpx.adobe.com/coldfusion/kb/coldfusion-serialfilter-file.html

Add the required class (or package): adding just one class is safest.
For example,

oracle.sql.converter.CharacterConverter1Byte

After adding it, check to see whether the issue is resolved. However, if Oracle JDBC requires multiple related classes, you may allow the package:

oracle.sql.converter.**

In short, best practice: start with the specific class, not the wildcard, unless the errors persist.

Report · Dec 21, 2025

Watch out there, BKBK. While you did indeed wisely suggest to Nick that he modify the whitelist file (rather than add that jvm arg), you've named the wrong file. It's certainly easy to do.

As indicated in Nick's error message, CF had suggested he "Add the class/package in the file cfusion/lib/serialfilter.txt to override the behavior and allow deserialization". Your note mistakenly slipped and suggested he add it to cfserialfilter.txt. They are indeed different, as discussed at that docpage you point to (but I would argue even that could do more to make the distiction clear, and I am suggesting that to Adobe).

Hope that helps others. Already one other thread pointed back to this one with a person saying they did what was suggested in that previous comment yet found it "didn't work". Of course, BKBK may well edit his comment to correct that, in which case this comment may seem confusing to future readers. We'll cross that bridge when we come it. 🙂 As always, just trying to help.

/Charlie (troubleshooter, carehart. org)

Report · Dec 22, 2025

Thanks, Charlie. Indeed a slip. I have changed the file-name to serialfilter.txt.

Connection verification failed for data source: xxxx_jdbc java.sql.SQLException:

1 Correct answer