ColdFusion

implementing CF23 update 24 where it seems to be complaining about the colon in the dbvarname. The procedure name is just PACKAGE.PROCEDURE_NAME I don't see the cause of the problem. Actual error: The value ":v_session_id" contains invalid characters. <cfprocparam dbvarname=":v_session_id" value="#functionHere()#" type="IN" cfsqltype="cf_sql_varchar">

Has anyone else experienced problems implementing CF23 update 24 where it seems to be complaining about the colon in the dbvarname. The procedure name is just PACKAGE.PROCEDURE_NAME I don't see the cause of the problem. Actual error: The value ":v_session_id" contains invalid characters. cfprocparam dbvarname=":v_session_id" value="#functionHere()#" type="IN" cfsqltype="cf_sql_varchar"

When using CFChart with an external style file, CF can no longer find it after applying the latest patch.  The error returned is:  Could not locate the style file ../includes/css/currency.piegraph. Current version:  2023,0,24,330957Previous version (which still works):  11,0,19,314546Server:  Windows Server 2019. Code:<cfchart style="..\includes\css\currency.piegraph" chartwidth="500"></cfchart> I have tried using relative path, absolute path, and also ExpandPath() and made sure the file exists but CF doesn’t like it.  We have other servers not yet updated but they can locate the file just fine.  Please suggest a fix. 

NOW LIVE — the September 2026 security updates for ColdFusion 2025 and ColdFusion 2023 have been released. The updates resolve critical, important, and moderate vulnerabilities that could lead to arbitrary code execution, arbitrary file system read, privilege escalation, security feature bypass, and memory exposure.What’s includedThe September 2026 release contains:SQL table and stored-procedure identifier validation New SQL validation opt-out flags XSLT collection() and uri-collection() blocked New XSLT compatibility flag AJAX widget HTML input sanitization guidance Configurable deserialization limits Package updatesDownload the updatesColdFusion 2025 updates ColdFusion 2023 updatesSee the tech notesColdFusion (2025 release) Update 13 ColdFusion (2023 release) Update 24Feedback and supportAs always, if you encounter issues after updating or need assistance planning your rollout, contact support or reply to this post with details. Your feedback helps us prioritize follow‑up fixes and c

Adobe has released ColdFusion 2025 Update 12 and ColdFusion 2023 Update 23. The releases resolve critical, important, and moderate vulnerabilities that could lead to arbitrary code execution, arbitrary file system read, privilege escalation, security feature bypass, and memory exposure.View the security bulletin, APSB26-90, for more information.Download the updatesColdFusion 2025 updates ColdFusion 2023 updatesWhat’s newNew JVM flag-Dcoldfusion.xml.saxon.allowCollection -Dcoldfusion.debugger.bindhost -Dcoldfusion.websocket.requireAuthForInvokeFor more details, view:JVM arguments in CF 2025 JVM arguments in CF 2023New Application.cfc flagthis.wsRequireAuthForInvokeThis flag controls whether a WebSocket client must be authenticated before it can invoke access="remote" CFC methods over the channel. By default, its value is True.For more details, view Application variables in ColdFusion.Tomcat upgradeTomcat 10.1.57 in CF 2025.12 Tomcat 9.0.120.0 in CF 2023.23New config file propertyccssecr

Website was working fine with hotfix 22.

<cfxml variable="xmlObject" casesensitive="yes"><gallery><album title="Product Detail"><cfoutput query="rsImageFiles"><img src = " http://www.bloodtest.in/Images/Products/#rsImageFiles.Name#" caption = "Flat View" /></cfoutput></album></gallery></cfxml>creates this xml file:<?xml version="1.0" encoding="UTF-8"?><gallery><album title="Product Detail"><img caption="Flat View" src=" http://www.bloodtest.in/Images/Products/B1004Back.jpg"/><img caption="Flat View" src=" http://www.bloodtest.in/Images/Products/B1004Full.jpg"/><img caption="Flat View" src=" http://www.bloodtest.in/Images/Products/B1004Main.jpg"/><img caption="Flat View" src=" http://www.bloodtest.in/Images/Products/B1004Thumb.jpg"/></album></gallery>The elements 'src' and 'caption' have been rearranged. Any way to avoid this? 

Hi,I recently downloaded and installed the version ColdFusion 2025 trial edition using GUI installer.After the installation,I was able to access the ColdFusion Administrator page successfully.However,I do not see the start/stop option for the ColdFusion Application Service in the windows Services console. So, I am unable to restart the service.Could you please advise how to enable or access the ColdFusion service? Thank you 

Hi Support team, I am working on a project in ColdFusion version 2023. Looking to setup the project in dev environment, but it seems the developer/trial version for 2023 link is not activeon the website url below. Can see only latest version 2025 for download.https://guides.adobe.com/coldfusion/en/docs/install-and-configure-coldfusion/coldfusion-downloads.htmlPlease share the link to download the developer edition for 2023. Thanks 

If you have schedule tasks that use CRONtime it would be nice to see that reflected in the Settings Summary.

I am trying to get the PDF manager to work on coldfusion 2025 (developer addition) running on Ubuntu with Apache web server. I did the full GUI install (ColdFusion_2025_GUI_WWEJ_linux64.bin ) select developer addition, all add ons etc. Did no install the separate addons download. So jetty is instslled under cfusion.After installation I can verify the PDF  Manager ( in my case the install changed the port to 8999). Like some other post I have seen I was seeing the unregistered in the log. Selecting edit and saving without any changes allowed me to verify and provided the reghistered log item:May 2, 2025 07:15:06 AM Information [http-nio-8500-exec-4] - PDFg service manager http://127.0.0.1:8997/PDFgServlet/ unregistered.May 2, 2025 07:15:06 AM Information [http-nio-8500-exec-4] - PDFg service manager http://127.0.0.1:8997/PDFgServlet/ registered.I do have it connected to appache anbd the web root is set so in a file called test.cfm I have:<cfhtmltopdf><h1>Hello World<

Using coldfusion version 2021 on production.The daily scheduler is in running status.Its showing next running time, but last run Column is empty for some schedulers Please advise.

Using coldfusion version 2021 on production.The daily scheduler is in running status.Its showing next running time, but last run Column is empty for some schedulers.No error seen inl og. Please advise.

Photoshop version:27.9.1Steps to reproduce:Open a PSD/document. Place an image and convert it to a Smart Object. Use Free Transform to scale the Smart Object down. Press Ctrl+T again. Choose Distort. Move the four corner handles to create a trapezoid/perspective shape. Press Enter to commit the transformation. The transformed object itself remains in the correct position. However, the Transform bounding box/handles immediately jump to the upper-left corner of the document, completely away from the object. Pressing Ctrl+T temporarily puts the bounding box back around the object, but after pressing Enter it jumps to the upper-left corner again.Expected result:The Transform bounding box should remain around the transformed Smart Object.Actual result:After committing a Distort transformation, the bounding box and transform handles jump to the upper-left corner of the document and no longer correspond to the transformed object's position or dimensions.Additional information:The problem does

Updated ColdFusion 2023 from update 22 to update 23. After restarting every instance aside from the cfusion instance would crash upon restarting. In the coldfusion-errors.log, you have two entries: SEVERE: End event threw exceptionjava.lang.NoSuchMethodException: Cannot find method [setChannel] in object [StandardEngine[Catalina]] of class [class org.apache.catalina.core.StandardEngine]    at org.apache.tomcat.util.IntrospectionUtils.callMethod1(IntrospectionUtils.java:541)WARNING: Catalina.start using D:\ColdFusion2023\D1/runtime/conf/server.xmlorg.xml.sax.SAXParseException; systemId: file://D/ColdFusion2023/D1/runtime/conf/server.xml; lineNumber: 117; columnNumber: 19; Error at line [117] column [19]: [Cannot find method [setChannel] in object [StandardEngine[Catalina]] of class [class org.apache.catalina.core.StandardEngine]]No other log files were generated. The cfusion instance operated normally and we were able to uninstall the update. 

We have a legacy app that extensively uses CFTABLE and CFCOL. Since these tags were removed from CF2025 I was wondering if it would be possible for Adobe to post the source code for these tags so that we can define them as customtags so that we don’t need to manually re-write every page in this application. It doesn’t seem like it would be that big of a deal for them to do this and it would save us a great deal of time and effort as all we would need to do is change <CFTABLE to <CF_CFTABLE and <CFCOL to <CF_CFCOL [or whatever the customtag is called] instead of changing all of the HTML on every single CFM file.thanks. 

There are a few issues with this page that I wanted to report. The ColdFusion Updates download link is not a link, but is formatted as a link (Download and install updates for Adobe ColdFusion (2023 release). Adobe recommends always applying the latest ColdFusion (2023 release) update.) This should link to the ColdFusion 2023 Updates page, but does not. Java SE 17.0.19 has some high-severity issues and Java SE 17.0.20 was released on 7/21/2026 and still has not been posted to the site. Can you please post that? The bottom of the page shows a Document History section that is badly neglected - showing only document updates from 2023!

Will need to upgrade Windows server from 2016 to 2019 or 2022. Will Coldfusion 2021 release be compatible with Windows Server 2019 or 2022? thanks

Today i received Adobe Security Bulletin indicating a priority 1 patch had been released for ColdFusion.  I reviewed the list of critical vulnerabilities patched and immediately started to patch my servers. I have a secure server, so i cannot use the CF Administrator to install. I referred to https://guides.adobe.com/coldfusion/en/docs/introduction-to-coldfusion/coldfusion-2023-updates.html and downloaded the hotfix jar and the packages zip.  However the hash published on that page for the hotfix and packages repository:“Hotfix and packages repository - link - (MD5:651E86B76AF4D405EAB2D177EC82EAE3”does not match the hash i generated after downloading the file. (I tried it multiple times, downloading from the web browser and via curl. I even tried downloading the packages to a personal device. The file size is always consistent, however the hash does not match. I can find no other hash.  Below are the results of my download, the file sizes of downloaded files and the hash results.comman

today i received Adobe Security Bulletin indicating a priority 1 patch had been released for ColdFusion.  I reviewed the list of critical vulnerabilities patched and immediately started to patch my servers.  I referred to https://guides.adobe.com/coldfusion/en/docs/introduction-to-coldfusion/coldfusion-2023-updates.html and downloaded the hotfix jar and the packages zip.  However the hash published on that page for the packages repository:  (MD5:651E86B76AF4D405EAB2D177EC82EAE3)“Hotfix and packages repository - link - (MD5:651E86B76AF4D405EAB2D177EC82EAE3)”does not match the hash i generated after downloading the file. (I tried it multiple times, downloading from the web browser and via curl. I even tried downloading the packages to a personal device. The file size is always consistent, however the hash does not match. I can find no other hash.  Below are the download command, results of my download, the file sizes of downloaded files and the hash results.command prompt visual with som

today i received Adobe Security Bulletin indicating a priority 1 patch had been released for ColdFusion.  I reviewed the list of critical vulnerabilities patched and immediately started to patch my servers.  I referred to https://guides.adobe.com/coldfusion/en/docs/introduction-to-coldfusion/coldfusion-2023-updates.html and downloaded the hotfix jar and the packages zip.  However the hash published on that page for the packages repository:“Hotfix and packages repository - link - (MD5:651E86B76AF4D405EAB2D177EC82EAE3”does not match the hash i generated after downloading the file. (I tried it multiple times, downloading from the web browser and via curl. I even tried downloading the packages to a personal device. The file size is always consistent, however the hash does not match. I can find no other hash.  Below are the results of my download, the file sizes of downloaded files and the hash results.command prompt visual with some information removed showing the curl call that downloaded

I have an interesting case in which the reflection removal heuristic fails. This is an information plaque at the museum entry: Before reflection removalAfter the removal to my astonishment the algorithm removed the white labels, and left the top right side reflections completely unchanged: Removed labels , reflections unchanged.Thanks,Thomas