Skip to content

CVE-2014-9166

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of...

5.0 Medium

CVE-2014-9166 is a medium vulnerability (CVSS 5.0) in Adobe Coldfusion, published December 10, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.05%, the 87th percentile. No source names a fixed version.

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.

Exploit likelihood

3.05%Up 2.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.

Record: CVE-2014-9166
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.

Record: CVE-2014-9166
Updated: 2026-11-02

EUVDEUVD-2014-8991 No score

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.

Record: EUVD-2014-8991
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f3qx-rcr8-qm9j No score

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of...

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.

Record: GHSA-f3qx-rcr8-qm9j
Updated: 2026-11-02

Affected products

adobe coldfusion

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References