CVE-2014-9166: Medium severity adobe coldfusion vulnerability
Published Dec 10, 2014
·Updated
Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.
Affected Software
18 affected components
Adobe ColdFusion=10.0
Adobe ColdFusion=10.0-update1
Adobe ColdFusion=10.0-update10
Adobe ColdFusion=10.0-update11
Adobe ColdFusion=10.0-update12
Adobe ColdFusion=10.0-update13
Adobe ColdFusion=10.0-update14
Adobe ColdFusion=10.0-update2
Adobe ColdFusion=10.0-update3
Adobe ColdFusion=10.0-update4
Adobe ColdFusion=10.0-update5
Adobe ColdFusion=10.0-update6
Adobe ColdFusion=10.0-update7
Adobe ColdFusion=10.0-update8
Adobe ColdFusion=10.0-update9
Adobe ColdFusion=11.0
Adobe ColdFusion=11.0-update1
Adobe ColdFusion=11.0-update2
Remediation
Event History
Dec 10, 2014
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9166?
The severity of CVE-2014-9166 is classified as a denial of service vulnerability.
2
How do I fix CVE-2014-9166?
To fix CVE-2014-9166, update Adobe ColdFusion to version 10 Update 15 or 11 Update 3 or later.
3
What versions of Adobe ColdFusion are affected by CVE-2014-9166?
Adobe ColdFusion versions 10 before Update 15 and 11 before Update 3 are affected by CVE-2014-9166.
4
What kind of attack does CVE-2014-9166 allow?
CVE-2014-9166 allows attackers to cause a denial of service through resource consumption.
5
Is CVE-2014-9166 easy to exploit?
CVE-2014-9166 can be exploited through unspecified vectors, making it difficult to determine the exact exploitation complexity.