ColdFusion (2025 release) updates

This article lists all released ColdFusion (2025 release) updates. 

ColdFusion (2025) Update 3 (release date, July 8, 2025) includes important security fixes that mitigate vulnerabilities related to arbitrary file reads, code execution, privilege escalation, and security feature bypass. The update also upgrades the underlying Tomcat engine to version 10.1.42 and resolves several issues reported in earlier updates.

View the security bulletin, APSB25-69, for more information.

For more details, see this article.

Type: Security

File: ColdFusion (2025 release) Update 3 (MD5: 41d73a0a6c28466d580e00e25182cb30)

Hotfix and packages repository: Link (MD5: e9bff6bdf4501c4e5a6e3d168d49d1e1)

Build Number: 2025,0,03,331507

ColdFusion (2025 release) Update 2 (release date, May 13, 2025) resolves critical and important vulnerabilities  that could lead to arbitrary file system reads, arbitrary code execution, privilege escalation, and security feature bypass. It also addresses the PDFg service-related issues from the previous ColdFusion update.

View the security bulletin, APSB25-52, for more information.

For more details, see this article.

Type: Security

File: ColdFusion (2025 release) Update 2 (MD5: 0d8a16dc614541a9cffde2b2261e97c7)

Hotfix and packages repository: Link (MD5: 8ecaf7a918a9ab808faa6777df3cc4de)

Build Number: 2025,0,02,331451

ColdFusion (2025 release) Update 1 (release date, April 8, 2025) resolves several critical vulnerabilities that could lead to arbitrary file system reading, arbitrary code execution, and security feature bypass.

View the security bulletin, APSB25-15, for more information.

For more details, see this article.

Type: Security

File: ColdFusion (2025 release) Update 1 (MD5: d682df0a74302d7d01cbec24842999b7)

Hotfix and packages repository: Link (MD5: 1f325decf201f506eabbb2a904226733)

Build Number: 2025,0,01,331420