CVE Catalog

CVE-1999-0858

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
13.38%

96th percentile - higher than 96% of all known CVEs

Summary

Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious WPAD server.

Risk Assessment

An attacker could take control of the user's network traffic, potentially leading to data leakage or session hijacking.

Recommendation

It is recommended to disable automatic proxy detection or apply security updates for Internet Explorer 5.

Original NVD description (English source)

Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS