The first (I think?) ColdFusion 9 Security bulletin has been released: Solution available for potential ColdFusion information disclosure issue This relates to Solr and it's built in web service.