ColdFusion (2021 release) updates

This article lists all released ColdFusion (2021 release) updates. 

ColdFusion (2021 release) Update 19 (release date, April 8, 2025) resolves several critical vulnerabilities that could lead to arbitrary file system reading, arbitrary code execution, and security feature bypass.

View the security bulletin, APSB25-15, for more information.

For more details, see this article.

Type: Security

Hotfix Packages repository: Link (MD5: 8c649984fd3da986a8991b11bc9c0d6d)

Hotfix jar: ColdFusion (2021 release) Update 19 (MD5: 9dc84ed20c7e9c896967466bd1b993d8)

Build Number: 2021,0,19,330379

ColdFusion (2021 release) Update 18 (release date, December 23, 2024) resolves a critical vulnerability that could lead to arbitrary file system read.

View the security bulletin, APSB24-107, for more information.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: b68cad23249541c67272e84ca992bf89)

File: ColdFusion (2021 release) Update 18 (MD5:7292eebfcf7ab7b0d800a7ad492b79f9)

Build Number: 2021,0,18,330341

ColdFusion (2021 release) Update 17 (release date, October 15, 2024) includes bug fixes and enhancements in Administrator, Language, CFSetup, Database, and other areas. The update contains library upgrades, such as Jackson-data-bind, netty, ehcache, etc. 

For more details, see this article.

Type: General

Hotfix and packages repository: Link (MD5: 0b54bddb19880cba1980450394ddd5cf)

File: ColdFusion (2021 release) Update 17 (MD5: 262f885b24bea73c8b0836ea0f9481ef)

Build Number: 2021,0,17,330334

ColdFusion (2021 release) Update 16 (release date, September 10, 2024) resolves a critical vulnerability that could lead to the deserialization of untrusted data. View the security bulletin, APSB24-71, for more information.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: 7c1bb0dabe7beb34d6d008c961b826ac)

File: ColdFusion (2021 release) Update 16 (MD5: 6256677a19da2615bf5121dfdcfc9a23)

Build Number: 2021,0,16,330307

In ColdFusion (2021 release) Update 15 (release date, August 20, 2024), we’ve upgraded Tomcat from version 9.0.85 to version 9.0.93.

For more details, see this article.

Type: General

Hotfix and packages repository: Link (MD5: 3ce6b5117449a7a4391de99cf229600d)

File: ColdFusion (2021 release) Update 15 (MD5: 5a1a11ef87913b6ebd16a1709c9cfec1)

Build Number: 2021,0,15,330303

ColdFusion (2021 release) Update 14 (release date, June 11, 2024) addresses vulnerabilities mentioned in the security bulletin, APSB24-41.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: 4ef4c1b6294854a8797ea55bbfaf683c)

File: ColdFusion (2021 release) Update 14 (MD5: d49896b2f53e3708dacbf3e23af912db)

Build Number: 2021,0,14,330296

ColdFusion (2021 release) Update 13 (release date, 12 March, 2024) addresses vulnerabilities mentioned in the security bulletin, APSB24-14.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: b1eed6c832a0243d29c8c3cd363f8be1)

File: ColdFusion (2021 release) Update 13 (MD5: fc3ae4adac3e9a0a2c71a4766aa4bc89)

Build Number: 2021,0,13,330286

ColdFusion (2021 release) Update 12 (release date, 14 November, 2023) addresses vulnerabilities that are mentioned in the security bulletin, APSB23-52.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: 6babac0ef450932617ff5e1bbb062052)

File: ColdFusion (2021 release) Update 12 (MD5: b86d9a89e5f689474d6255981631d3cc)

Build Number: 2021,0,12,330257

ColdFusion (2021 release) Update 11 (release date: October 6, 2023) includes bug fixes and enhancements in Administrator, Installer, Migration, Package manager, Database, and other areas. The update contains upgrades to Tomcat (v9.0.78) and other libraries, such as jackson-databind, Netty, etc. Note that this update is cumulative and includes fixes from the previous updates. 

For more details, see this article.

Type: General

Hotfix and packages repository: Link (MD5: d9cc87cc6572f2c19495b44602054f9f)

File: ColdFusion (2021 release) Update 11 (MD5: ab24fb72c4cfd396e742bcd0cacbd537)

Build Number: 2021,0,11,330247

ColdFusion (2021 release) Update 10 (release date, 17 August, 2023) introduces the ColdFusion serial filter that can be used to allow or disallow Java classes or packages for the deserialization of Wddx packets.

For more details, see this article.

Type: General

Hotfix and packages repository: Link (MD5: 3ce216e0d462b9a5df56939479345219)

File: ColdFusion (2021 release) Update 10 (MD5: cf46216fba49dd26c388c74f712132b5)

Build Number: 2021,0,10,330161

ColdFusion (2021 release) Update 9 (release date, 19 July 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-47.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: b208f282a78c6ecdc5a021081800a5ff)

File: ColdFusion (2021 release) Update 9 (MD5: a28e563dcfd102c5a1b8a1dd0490b306)

Build Number: 2021,0,9,330148

ColdFusion (2021 release) Update 8 (release date, 14 July 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-41.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: 02840c613c8b3b3243b873b100e1d8a6)

File: ColdFusion (2021 release) Update 8 (MD5: 334cd6216c23d14a8306a40460878465)

Build Number: 2021,0,8,330144

ColdFusion (2021 release) Update 7 (release date, 11 July 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-40.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: 5ce0fe31f24d8de822fdb423df74648b)

File: ColdFusion (2021 release) Update 7 (MD5: 35dad57654e871158b041dfb2fd91a2d)

Build Number: 2021,0,7,330142

ColdFusion (2021 release) Update 6 (release date, 14 March 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-25.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link (MD5: )

File: ColdFusion (2021 release) Update 6 (MD5: d78b9cbdb249cd0331256db179312b87)

Build Number: 2021,0,6,330132

ColdFusion (2021 release) Update 5 (release date, 11 October 2022) addresses vulnerabilities that are mentioned in the security bulletin APSB22-44.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link

File: ColdFusion (2021 release) Update 5 (MD5: 7abc6c0d3b1fc0a72f7020af11eba56c)

Build Number: 2021,0,5,330109

ColdFusion (2021 release) Update 4 (release date, 10 May, 2022) addresses vulnerabilities that are mentioned in the security bulletin APSB22-22.

For more details, see this article.

Type: Security

File: ColdFusion (2021 release) Update 4 (MD5:bfd2712f220fd62c448506c8b1d577e5)

Build Number: 2021,0,4,330004

ColdFusion (2021 release) Update 3 (release date, 17 December, 2021) addresses vulnerabilities that are mentioned in CVE-2021-44228.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link

File: ColdFusion (2021 release) Update 3 (MD5: 90d650142ec2d9f141b5f1a2016c9774)

Build Number: 2021,0,3,329779

ColdFusion (2021 release) Update 2 (release date, 14 September, 2021) addresses vulnerabilities mentioned in the security bulletin, APSB21-75, CFSetup changes, ColdFusion Lambda, licensing and activation updates, and bug fixes.

For more details, see this article.

Type: Security

Hotfix and packages repository: Link

Build Number: 2021,0,2,328618

ColdFusion (2021 release) Update 1 (release date, 22 March, 2021) addresses vulnerabilities that are mentioned in the security bulletin, APSB21-16.

For more details, see this article.

Type: General

File: ColdFusion (2021 release) Update 1 (MD5: b3fcc35b2409d4592ebc83b81e8aa1a7)

Hotfix and Package repository: Link

Build Number: 2021,0,1,325996