VULNERABILITY INTELLIGENCE
CVE-1999-1124
CVSS score7.5 NONE
EPSS probability1.48%
CISA KEVNot currently listed
Published1999-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other