CVE-2000-0189: ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the ap
Summary
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
Severity
UNKNOWN
Source Attribution
Source: NVD · Updated: 2026-08-21T04:30:56.668Z · Confidence: high
Impact
Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.
Affected Software
Fix
Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.