Lucene search
HistoryDec 25, 1999 - 5:00 a.m.
CVE-1999-0455
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.2%
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
Affected configurations
Node
allairecoldfusion_serverMatch4.0
References
Related
cve
cve
CVE-1999-0455
2000-02-04 05:00:00
cvelist
cvelist
CVE-1999-0455
2000-02-04 05:00:00
nessus
nessus
ColdFusion Multiple Vulnerabilities (File Upload/Manipulation)
1999-07-09 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.2%
Related for NVD:CVE-1999-0455