What’s Vulnerable › Vulnerabilities
CVE-1999-1357
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 1999-10-05 · updated 2026-06-16
Description
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
Affected products
- Netscape Communicator: through 4.7; 4.04, 4.51
References
Get alerted when CVE-1999-1357 or the next vulnerability affects your stack