CVE-1999-1357
Last modified
CVE-1999-1357 is a vulnerability of currently unknown severity. Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.. EPSS estimates a 1.38% chance of exploitation in the next 30 days.
Description
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netscape | Communicator | <= 4.7 |
| Netscape | Communicator | 4.04 |
| Netscape | Communicator | 4.51 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-1999-1357?
How severe is CVE-1999-1357?
How do I fix CVE-1999-1357?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 1999
- CVE-1999-1351Directory traversal vulnerability in KVIrc IRC client 0.9.0 …
- CVE-1999-1352mknod in Linux 2.2 follows symbolic links, which could allow…
- CVE-1999-1353Nosque MsgCore 2.14 stores passwords in cleartext: (1) the a…
- CVE-1999-1354E-mail client in Softarc FirstClass Internet Server 5.506 an…
- CVE-1999-1355BMC Patrol component, when installed with Compaq Insight Man…
- CVE-1999-1356Compaq Integration Maintenance Utility as used in Compaq Ins…
- CVE-1999-1358When an administrator in Windows NT or Windows 2000 changes …
- CVE-1999-1359When the Ntconfig.pol file is used on a server whose name is…
- CVE-1999-1360Windows NT 4.0 allows local users to cause a denial of servi…
- CVE-1999-1362Win32k.sys in Windows NT 4.0 before SP2 allows local users t…
- CVE-1999-1363Windows NT 3.51 and 4.0 allow local users to cause a denial …
- CVE-1999-1364Windows NT 4.0 allows local users to cause a denial of servi…
Are you affected by CVE-1999-1357?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST