Whatever message this page gives is out now! Go check it out!

ColdFusion (2021 release) updates

Last update:
May 18, 2026
ColdFusion (2021 release) updates
Warning: End of core support for ColdFusion 2021 update release
Adobe ColdFusion (2021 release) Update 23 marks the end of core support for ColdFusion 2021 update releases.
Adobe ColdFusion (2021 release) Update 23 is the final update, as this version reached its end of core support on November 10, 2025. After this update, no further core updates will be provided for this version.
Note: Extended support options may still be available after core support ends. Please review Adobe’s End-of-Life (EOL) matrix for details on timelines and support plans. See the Adobe support matrix for more information.
This article lists all released ColdFusion (2021 release) updates.
Note:
Adobe recommends that you always apply the latest ColdFusion (2021 release) update.

COLDFUSION (2021 RELEASE) UPDATE 23

ColdFusion (2021 release) Update 23 (release date, 9 December 2025) includes important security fixes that mitigate vulnerabilities related to arbitrary file system write, arbitrary file system read, arbitrary code execution, and security feature bypass. The update also upgrades the underlying Tomcat engine to version 9.0.111.0.
View the security bulletin, APSB25-105, for more information.
For more details, see this article.
Type: Security
Hotfix Packages repository: Link (MD5: 5f435b240c62593d4c9a6c58beb51679)
Hotfix jar: ColdFusion (2021 release) Update 23 (MD5: 3939864ac4cede1a831cc7f3185f3785)
Build Number: 2021,0,23,330864

COLDFUSION (2021 RELEASE) UPDATE 22

ColdFusion (2021 release) Update 22 (release date, 9 September, 2025) addresses an important security fix related to critical path traversal.
View the security bulletin, APSB25-93, for more information.
For more details, see this article.
Type: Security
Hotfix Packages repository: Link (MD5: e576a72941b51d319b539f9bbc113625)
Hotfix jar: ColdFusion (2021 release) Update 22 (MD5: aa85399d39dae2404e644d2015a75a03)
Build Number: 2021,0,22,330451

COLDFUSION (2021 RELEASE) UPDATE 21

ColdFusion (2021 release) Update 21 (release date, July 8, 2025) includes important security fixes that mitigate vulnerabilities related to arbitrary file reads, code execution, privilege escalation, and security feature bypass.
The update also upgrades the underlying Tomcat engine to version 9.0.106 and resolves several issues reported in earlier updates.
View the security bulletin, APSB25-69, for more information.
For more details, see this article.
Type: Security
Hotfix Packages repository: Link (MD5: 146260a92f0da550fd18f5f3070b3463)
Hotfix jar: ColdFusion (2021 release) Update 21 (MD5: 842933470cb727d54531f6d44dfef7d7)
Build Number: 2021,0,21,330446

COLDFUSION (2021 RELEASE) UPDATE 20

ColdFusion (2021 release) Update 20 (release date, May 13, 2025)  resolves critical and important vulnerabilities that could lead to arbitrary file system reads, arbitrary code execution, privilege escalation, and security feature bypass. It also addresses the PDFg service-related issues from the previous ColdFusion updates.
View the security bulletin, APSB25-52, for more information.
For more details, see this article.
Type: Security
Hotfix Packages repository: Link (MD5: da1269a149bf87dde3f24707812e15c6)
Hotfix jar: ColdFusion (2021 release) Update 20 (MD5: c5f2347d327e86437bf32a7d71f1b699)
Build Number: 2021,0,20,330407

COLDFUSION (2021 RELEASE) UPDATE 19

ColdFusion (2021 release) Update 19 (release date, April 8, 2025) resolves several critical vulnerabilities that could lead to arbitrary file system reading, arbitrary code execution, and security feature bypass.
View the security bulletin, APSB25-15, for more information.
For more details, see this article.
Type: Security
Hotfix Packages repository: Link (MD5: 8c649984fd3da986a8991b11bc9c0d6d)
Hotfix jar: ColdFusion (2021 release) Update 19 (MD5: 9dc84ed20c7e9c896967466bd1b993d8)
Build Number: 2021,0,19,330379

COLDFUSION (2021 RELEASE) UPDATE 18

ColdFusion (2021 release) Update 18 (release date, December 23, 2024) resolves a critical vulnerability that could lead to arbitrary file system read.
View the security bulletin, APSB24-107, for more information.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: b68cad23249541c67272e84ca992bf89)
File: ColdFusion (2021 release) Update 18 (MD5:7292eebfcf7ab7b0d800a7ad492b79f9)
Build Number: 2021,0,18,330341

COLDFUSION (2021 RELEASE) UPDATE 17

ColdFusion (2021 release) Update 17 (release date, October 15, 2024) includes bug fixes and enhancements in Administrator, Language, CFSetup, Database, and other areas. The update contains library upgrades, such as Jackson-data-bind, netty, ehcache, etc.
For more details, see this article.
Type: General
Hotfix and packages repository: Link (MD5: 0b54bddb19880cba1980450394ddd5cf)
File: ColdFusion (2021 release) Update 17 (MD5: 262f885b24bea73c8b0836ea0f9481ef)
Build Number: 2021,0,17,330334

COLDFUSION (2021 RELEASE) UPDATE 16

ColdFusion (2021 release) Update 16 (release date, September 10, 2024) resolves a critical vulnerability that could lead to the deserialization of untrusted data. View the security bulletin, APSB24-71, for more information.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: 7c1bb0dabe7beb34d6d008c961b826ac)
File: ColdFusion (2021 release) Update 16 (MD5: 6256677a19da2615bf5121dfdcfc9a23)
Build Number: 2021,0,16,330307

COLDFUSION (2021 RELEASE) UPDATE 15

In ColdFusion (2021 release) Update 15 (release date, August 20, 2024), we’ve upgraded Tomcat from version 9.0.85 to version 9.0.93.
For more details, see this article.
Type: General
Hotfix and packages repository: Link (MD5: 3ce6b5117449a7a4391de99cf229600d)
File: ColdFusion (2021 release) Update 15 (MD5: 5a1a11ef87913b6ebd16a1709c9cfec1)
Build Number: 2021,0,15,330303

COLDFUSION (2021 RELEASE) UPDATE 14

ColdFusion (2021 release) Update 14 (release date, June 11, 2024) addresses vulnerabilities mentioned in the security bulletin, APSB24-41.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: 4ef4c1b6294854a8797ea55bbfaf683c)
File: ColdFusion (2021 release) Update 14 (MD5: d49896b2f53e3708dacbf3e23af912db)
Build Number: 2021,0,14,330296

COLDFUSION (2021 RELEASE) UPDATE 13

ColdFusion (2021 release) Update 13 (release date, 12 March, 2024) addresses vulnerabilities mentioned in the security bulletin, APSB24-14.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: b1eed6c832a0243d29c8c3cd363f8be1)
File: ColdFusion (2021 release) Update 13 (MD5: fc3ae4adac3e9a0a2c71a4766aa4bc89)
Build Number: 2021,0,13,330286

COLDFUSION (2021 RELEASE) UPDATE 12

ColdFusion (2021 release) Update 12 (release date, 14 November, 2023) addresses vulnerabilities that are mentioned in the security bulletin, APSB23-52.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: 6babac0ef450932617ff5e1bbb062052)
File: ColdFusion (2021 release) Update 12 (MD5: b86d9a89e5f689474d6255981631d3cc)
Build Number: 2021,0,12,330257

COLDFUSION (2021 RELEASE) UPDATE 11

ColdFusion (2021 release) Update 11 (release date: October 6, 2023) includes bug fixes and enhancements in Administrator, Installer, Migration, Package manager, Database, and other areas. The update contains upgrades to Tomcat (v9.0.78) and other libraries, such as jackson-databind, Netty, etc. Note that this update is cumulative and includes fixes from the previous updates.
For more details, see this article.
Type: General
Hotfix and packages repository: Link (MD5: d9cc87cc6572f2c19495b44602054f9f)
File: ColdFusion (2021 release) Update 11 (MD5: ab24fb72c4cfd396e742bcd0cacbd537)
Build Number: 2021,0,11,330247

COLDFUSION (2021 RELEASE) UPDATE 10

ColdFusion (2021 release) Update 10 (release date, 17 August, 2023) introduces the ColdFusion serial filter that can be used to allow or disallow Java classes or packages for the deserialization of Wddx packets.
For more details, see this article.
Type: General
Hotfix and packages repository: Link (MD5: 3ce216e0d462b9a5df56939479345219)
File: ColdFusion (2021 release) Update 10 (MD5: cf46216fba49dd26c388c74f712132b5)
Build Number: 2021,0,10,330161

COLDFUSION (2021 RELEASE) UPDATE 9

ColdFusion (2021 release) Update 9 (release date, 19 July 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-47.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: b208f282a78c6ecdc5a021081800a5ff)
File: ColdFusion (2021 release) Update 9 (MD5: a28e563dcfd102c5a1b8a1dd0490b306)
Build Number: 2021,0,9,330148

COLDFUSION (2021 RELEASE) UPDATE 8

ColdFusion (2021 release) Update 8 (release date, 14 July 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-41.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: 02840c613c8b3b3243b873b100e1d8a6)
File: ColdFusion (2021 release) Update 8 (MD5: 334cd6216c23d14a8306a40460878465)
Build Number: 2021,0,8,330144

COLDFUSION (2021 RELEASE) UPDATE 7

ColdFusion (2021 release) Update 7 (release date, 11 July 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-40.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5: 5ce0fe31f24d8de822fdb423df74648b)
File: ColdFusion (2021 release) Update 7 (MD5: 35dad57654e871158b041dfb2fd91a2d)
Build Number: 2021,0,7,330142

COLDFUSION (2021 RELEASE) UPDATE 6

ColdFusion (2021 release) Update 6 (release date, 14 March 2023) addresses vulnerabilities that are mentioned in the security bulletin APSB23-25.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link (MD5:)
File: ColdFusion (2021 release) Update 6 (MD5: d78b9cbdb249cd0331256db179312b87)
Build Number: 2021,0,6,330132

COLDFUSION (2021 RELEASE) UPDATE 5

ColdFusion (2021 release) Update 5 (release date, 11 October 2022) addresses vulnerabilities that are mentioned in the security bulletin APSB22-44.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link
File: ColdFusion (2021 release) Update 5 (MD5: 7abc6c0d3b1fc0a72f7020af11eba56c)
Build Number: 2021,0,5,330109

COLDFUSION (2021 RELEASE) UPDATE 4

ColdFusion (2021 release) Update 4 (release date, 10 May, 2022) addresses vulnerabilities that are mentioned in the security bulletin APSB22-22.
For more details, see this article.
Type: Security
File: ColdFusion (2021 release) Update 4 (MD5:bfd2712f220fd62c448506c8b1d577e5)
Build Number: 2021,0,4,330004

COLDFUSION (2021 RELEASE) UPDATE 3

ColdFusion (2021 release) Update 3 (release date, 17 December, 2021) addresses vulnerabilities that are mentioned in CVE-2021-44228.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link
File: ColdFusion (2021 release) Update 3 (MD5: 90d650142ec2d9f141b5f1a2016c9774)
Build Number: 2021,0,3,329779

COLDFUSION (2021 RELEASE) UPDATE 2

ColdFusion (2021 release) Update 2 (release date, 14 September, 2021) addresses vulnerabilities mentioned in the security bulletin, APSB21-75, CFSetup changes, ColdFusion Lambda, licensing and activation updates, and bug fixes.
For more details, see this article.
Type: Security
Hotfix and packages repository: Link
Build Number: 2021,0,2,328618

COLDFUSION (2021 RELEASE) UPDATE 1

ColdFusion (2021 release) Update 1 (release date, 22 March, 2021) addresses vulnerabilities that are mentioned in the security bulletin, APSB21-16.
For more details, see this article.
Type: General
File: ColdFusion (2021 release) Update 1 (MD5: b3fcc35b2409d4592ebc83b81e8aa1a7)
Hotfix and Package repository: Link
Build Number: 2021,0,1,325996

Share this page

Was this page helpful?
We're glad. Tell us how this page helped.
We're sorry. Can you tell us what didn't work for you?
Thank you for your feedback. Your response will help improve this page.

On this page