CVE-1999-0455
HighExploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
Risk Assessment
Attackers may gain access to sensitive data or delete critical files, potentially leading to serious security implications for the server and the organization's data.
Recommendation
It is recommended to restrict access to the exprcalc.cfm file and conduct a security audit of the ColdFusion application to minimize risk.
Original NVD description (English source)
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

