Yes, ColdFusion 9.0.2 update is a summation of ColdFusion 9.0.1, ColdFusion 9.0.1 Cumulative HotFixes 1 & 2, all ColdFusion 9.0.1 Security HotFixes, but without Verity.
http://helpx.adobe.com/coldfusion/release-note/coldfusion-9-0-update-2 .html
however there was update 1 (cumulative hotfix 1) released for CF 9.0.2 : http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-1-coldfusion-90 2.html
For CF 9.0.2 FAQ : http://www.carehart.org/blog/client/index.cfm/2013/8/19/understanding_ ColdFusion_9.0.2_a_FAQ
It will answer all of your queries.
Thanks
VJ Image may be NSFW.
Clik here to view.