-
Close Search
This Blog contains details about the Language Enhancements done in ColdFusion 2025 release.
When activating the license for Adobe ColdFusion 2021 or 2023, it is essential to ensure that the server has an active internet connection. Without internet connectivity, the activation process will fail. If the server connects to the internet through a proxy, additional configuration may be required. Specifically, it is […]
Migrating an Adobe ColdFusion website or application to the cloud can open the door to improved scalability, performance, and cost-efficiency. However, the process of migrating a ColdFusion application introduces unique challenges due to its reliance on specific configurations, libraries, and server setups. Whether you are migrating from a traditional on-premises environment, a VPS, or another cloud provider, it’s crucial to understand potential roadblocks and how to address them. In this blog, we’ll focus on the common issues you might encounter […]
We have released critical security updates for ColdFusion (2023 release) and ColdFusion (2021 release). Adobe is aware that CVE-2024-53961 has a known proof-of-concept that could cause an arbitrary file system read. View the security bulletin, APSB24-107, and the tech notes for more information. Download the updates from the following locations: ColdFusion (2023 release) Updates ColdFusion (2021 release) Updates For more information, view the following tech notes: ColdFusion (2023 release) Update 12 ColdFusion (2021 release) Update 18 Known issues in the updates […]
In this episode, your hosts Ben Nadel and Ryan Brown are joined by long time Adobe ColdFusion developer and security expert, Justin Scott, to discuss his recent presentation at the Adobe ColdFusion Summit.
Who is Justin Scott
• CISO with Smart Communications
• (ISC)² Certified
• Long time ColdFusion developer
Justin’s Summit Presentation – https://www.darktech.org/advanced-cryptography.pdf
Adobe ColdFusion (2025 release) now uses Tomcat 10.1, upgrading from Tomcat 9, and supports servlet specifications 6.0, replacing 4.0. Why? Availability of new features – Tomcat 10 introduces many new features, while Tomcat 9 primarily focuses on security updates and vulnerability fixes. Improved performance Enhanced security Compatibility with newer Java applications Support for newer specifications Servlet specification upgrade. Tomcat 9 – Servlet 4.0 API specifications Tomcat 10.1 – Servlet 6.0 API specifications What has changed? This namespace change is part […]
[Update 13 Dec]: Added cfencode.sh to the table of removals. Updated Customizing an HTTP response to HTTP reason phrases. Added contact email id cf-deprecation@adobe.com In the upcoming ColdFusion (2025 release), we will deprecate and remove certain features to enhance the overall experience, improve security, stay aligned with the latest technological advancements, and eliminate obsolete libraries. We announced the deprecations and removals on the ColdFusion pre-release forum a few days ago. If you haven’t already signed up, please do so today As part of this exercise, […]
From what I understand, the “java.net.http” package has been included in JREs since Java 11. Coldfusion comes with a Java 17 JRE. However, it seems that there is no “java.net.http” package available with that JRE as executing the following produces a ClassNotFoundException: CreateObject(“java”, “java.net.http.HttpClient”) I’m not quite understanding. Does Coldfusion ship with a special JRE that doesn’t have all the modules that a normal Java 17 JRE would have?
Get an exclusive sneak peek at what’s next for ColdFusion! Sign up for the ColdFusion 2025 Beta Program and get early access to shape the future with us. Engage with the community in the forums, share your thoughts, and keep up with the newest updates and features. Join the Beta program Make Your Voice Heard and Win Big! Join our weekly engagement challenge during the ColdFusion 2025 Beta! Every week, we’ll reward top contributors with exciting prizes. Your feedback matters, […]
