CVE-1999-0477

CVE-1999-0477

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.3%
from disclosure to weaponsame day
Published on NVDFeb 4
1st PoCDec 25
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.