VULNERABILITY INTELLIGENCE
CVE-1999-1357
CVSS score7.5 NONE
EPSS probability2.04%
CISA KEVNot currently listed
Published1999-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other