CVE Catalog

CVE-1999-0455

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
5.48%

92th percentile - higher than 92% of all known CVEs

Summary

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

Risk Assessment

Attackers may gain access to sensitive data or delete critical files, potentially leading to serious security implications for the server and the organization's data.

Recommendation

It is recommended to restrict access to the exprcalc.cfm file and conduct a security audit of the ColdFusion application to minimize risk.

Original NVD description (English source)

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS