VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 1999· Updated Jun 16, 2026

CVE-1999-1357

CVE-1999-1357

Description

Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Netscape/Communicator4 versions
    cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:*range: <=4.7
    • cpe:2.3:a:netscape:communicator:4.04:*:*:*:*:*:*:*
    • cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*
    • (no CPE)range: 4.04 - 4.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.