CVE-2014-9166
Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors.
Date published : 2014-12-10
http://helpx.adobe.com/security/products/coldfusion/apsb14-29.html
