CVE-2014-9166 — Adobe Coldfusion vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
1.4%
top 19.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Coldfusion
Timeline
PublishedDec 10
Latest updateMay 13

Description

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDadobe/coldfusion10.0, 11.0+1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f3qx-rcr8-qm9j: Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vecto↗2022-05-13
▶
CVEList
CVE-2014-9166: Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vecto↗2014-12-10
▶
CVE-2014-9166 — Adobe Coldfusion vulnerability | cvebase