Is there an up to date roadmap for Adobe ColdFusion?

With Lucee being such a strong contender why does Adobe think that open source is such a polar opposite to decent support contracts ? Perhaps because the CF team are resource poor and support isn't one of their strong suits. Opening CF would only be good for the platform right ?

Hey, any JWT experts here? I'm trying to connect to NetSuite with a signed JWT. It works fine with JavaScript (jsrsasign), but I'm hoping to solve this using ColdFusion 2023 to keep it synchronous. It requires ES256, a header, payload, and a PrivateKey.pem. The jwt-cfml comes close, but it throws a No EC error using this algorithm... even after encoding the PEM as PKCS#8 format as described. Using the CF CreateSignedJWT function does not help at all. Just curious if this is even possible. Thanks.

I just got a brand new macBook (macBook Air, 16GB with ARM M4 chip) and I am trying to install ColdFusion2025, but I get an error saying that the downloader can't be opened because it can't be verified. Plus see screenshot. Can anybody at Adobe help me install ColdFusion2025?

Hi all, does anyone know if this impacts ACF? https://nvd.nist.gov/vuln/detail/CVE-2025-24813 https://www.bleepingcomputer.com/news/security/critical-rce-flaw-in-apache-tomcat-actively-exploited-in-attacks/

Hello ACF people! Is there a way to create a scheduled task in ACF that runs at an interval of less than one minute? I'm aware that Lucee can have scheduled tasks that run every 10 seconds. The ACF Administrator will only accept a minimum interval value of 1 minute. I read online that you can edit the ACF neo-cron.xml file and manually change the interval value for a given scheduled task, but there was also some debate as to whether or not this would work. Any guidance on this front would be appreciated!

I am heading to the North Carlonia Adobe ColdFusion Roadshow next week and want to help fill the building! If you are a CF-er and bring a non-CF friend, xByte Cloud will give you a $50 Amazon Gift Card. I heard we've had 50 people in the past. Let's break some records!!!! @Mark Takata (Adobe)

greetings! is anyone familiar with all the switches to flip so that CF's Java dependencies (like Ehcache -

net.sf.ehcache

) are logged? I'm running ACF '23 and I have the following in my `cfusion/lib`: •

log4j.properties

•

log4j2.properties

•

logging.properties

•

neo-logging.xml

I'm fairly certain it's

log4j2.properties

, but the most I can get is a

WARN

when I have my log level set to

TRACE

. it's very bizarre to me, but I'm not in Java enough to know definitively what to do. I'd appreciate any insight you all might have. many thanks!

I think your hunch is correct:

log4j2.properties

. •

log4j.properties

(and

logger.xml

) settings are specific to log4j configuration; •

logging.properties

settings configure ColdFusion's default logging behaviour server-wide; •

neo-logging.xml

settings configure ColdFusion's own loggers; Using your Ehcache example, you should see the following setting in `log4j2.properties`:

###--------------- Ehcache Log Settings ------

### Set Ehcache log

logger.ehcache =ERROR, CONSOLE

logger.ehcache.name = net.sf.ehcache

That said, it depends where you set the log level. ColdFusion might not log anything if, for example, a third-party Java application has the responsibility for logging Ehcache events. To see the list of all the loggers of ColdFusion's Java dependencies 1. add the flag

-Dlog4j2.debug=true

to the

java.args

property in `/bin/jvm.config`; 2. restart ColdFusion 2023; 3. open coldfusion-error.log in an editor and look for lines such as

"DEBUG StatusLogger Registering MBean org.apache.logging.log4j2:type=7b676112,component=Loggers,name=xxx"

The JEE packager in ACF 2023 Enterprise is straight-up broken. It will NOT create a functioning war file. I have been going back-and-forth with Adobe support for a month and they still don't even understand the problem, let alone come anywhere close to fixing it.

I'm writing a service that imports large spreadsheets into a database table. If I start with a CSV file, then I can use

FileReadLine

(with a bit of fancy handling) to process one row, without having to read the whole file into memory first. And then I can parallelize the row processing to speed the whole thing up. This part all works wonderfully. But now I'm trying to adjust it to handle xlsx files too. My basic plan was to convert the xlsx file to a csv via:

cfspreadsheet(action: "read", src: filePath, format: "csv", name: "local.csvString");
FileWrite(filePath, local.csvString);

and then just pass the CSV file to my previously mentioned code. But what I'm finding is that ColdFusion is throwing an OutOfMemoryError. It's getting caught and logged by my onError function in Application.cfc. But I'm trying to figure out how to catch it before that, and give users a better error message. Wrapping the cfspreadsheet in a try/catch is not doing the trick. So is there something else I can try? I'm also willing to take ideas on how to more efficiently process these files.

Adobe Security Bulletin: APSB25-15 https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical and important vulnerabilities that could lead to arbitrary file system read, arbitrary code execution and security feature bypass. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. * PLEASE READ THE ENTIRE BULLETIN AND BACK UP YOUR SERVERS PRIOR TO APPLYING *

Is it me or do the checksums of the jar files not match (I'm on CF2021) ~/Downloads ❯ md5sum hotfix-019-330379.jar 9dc84ed20c7e9c896967466bd1b993d8 hotfix-019-330379.jar File: ColdFusion (2021 release) Update 19 (MD5: b9b3690c7829693325dba0ba037649db)

<https://helpx.adobe.com/coldfusion/kb/coldfusion-2021-updates.html>

Hey all, apologies but I am dealing with a personal emergency. The amazing support team is here to take care of you

For September's CFSummit (Las Vegas), are there going to be two separate certification/exam days (one before and one after the main conference) or is the date just not nailed down yet to one or the other?

Here's a question that's been stuck in my head about doing manual updates. I always use a locally-hosted update-source site I created in IIS on my server, start that site in IIS, then I point the <packagesurl> value in the neo_updates.xml files to that local destination before doing my java -jar etc etc. Is it possible to use the actual Windows-based pathname to the bundlesdependency.json file (e.g., "X:\somedirectory\hotfix-packages-cf2021-019-330379\bundlesdependency.json") in the neo_updates.xml file instead?

Is there any reason why we could not remove the .java files in the CF23 example directories? For example, cfusion \ gateway \ src \ examples \ watcher. But there are scattered examples of .java in various example folders and the DoD STIG scanner is complaining about them.

just a heads up - this page in the docs https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-functions/functions-s/spreadsheetremovecolumnbreak.html looks like it wants to be linked to from the left sidebar nav (under Coldfusion functions > Functions-s), but the link there is https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-functions/content/help/[…]coldfusion-functions/functions-s/spreadsheetremovecolumnbreak which 404s.

Hello, does anybody know why PDF services stop working after installing ACF2023 Updates?

Probably more a question for the Adobe folks... This bug ticket reported for CF2021 for weird spread operator results (https://tracker.adobe.com/#/view/CF-4219724) is marked as fixed in CF2023, but it definitely is not. Testing in CF2025, everything works as expected, but why note CF2023 if it wasn't included. Always great to see things get fixed, but we're not on CF2025.

Regarding ColdFusion 2021 Update 19: When our hosting company updated one of our servers to the latest patch, CFHTMLTOPDF stopped working, is it correct that it doesn't work with JDK 11.0.22? They said we'd have to downgrade Java or upgrade to at least ColdFusion 2023...

This message was deleted.

Has anyone encountered a bug with their CF logs that are showing %a or %z in them in columns that should have a proper value but don't anymore? Edit: Tracing back it looks like it happened after a server ran out of disk space and after clearing space and restarting CF it has been happening ever since, clearing the cfclasses and the felix cache has not resolve the issue.

Here's a gem from CF11, the stack trace is all java, no cf files "Error","ajp-bio-8014-exec-129","04/24/25","131638",,"Application applinks could not be found. The specific sequence of files included or processed is: '''' " javax.servlet.ServletException: Application applinks could not be found.

Just give this server the ol' vulcan neck pinch?

I perfectly understand that /flex2gateway/ has been deprecated in recent ACF versions, and that Flash is dead, yada yada. But I have a client here still running a desktop AIR executable which still uses it for data remoting. QUESTION: • Was CF2018 the last version to support the native /flex2gateway/ daemon? Lots of EOL posts, but not this answer to be found.

hey all, trying to install the PMT I guess 2025 on a server where we are using CF2021....installed the PMT, then realized I had to add PMT extension in CFAdmin....did that. when in PMT it finds the CF Instance, when I try to enable in PMT, I get a message triangle which states i need to upgrade to newer version of PMT....how do I upgrade pmt if I can't get past the Setup dialog in PMT? Plus, I installed the version from the Website....any thoughts?

Hey all, after posting on her friday, I was able to install CF 2021 PMT....some css is weird in edge so i don't see the menu items, but can still click on the space and they work...weird. ANYWAY, I thought in PMT it tracked errors that happen in the code either reading an error log file, or something...am i incorrect, or maybe the system has not thrown an error yet...testing it on our test server so not as much traffic...Thanks for the info

is there a way to get the unscoped.log on 2025?