CVE-1999-0455

Summary

CVE-1999-0455 is a vulnerability affecting ColdFusion's Expression Evaluator sample application. This issue allows remote attackers to read or delete files on the server through the exprcalc.cfm component, as it fails to adequately restrict access to the server. By manipulating the input to the Expression Evaluator, an attacker can execute arbitrary file system commands, potentially leading to sensitive data exposure or unauthorized modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.