VULNERABILITY INTELLIGENCE

CVE-1999-0455

CVSS score7.5 NONE
EPSS probability5.85%
CISA KEVNot currently listed
Published1999-12-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references