CVEvulnerability

CVE-1999-0455

7.5 HIGH Published 1999-12-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-12-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

Affected configurations

• allaire coldfusion server 4.0

References