Every CVESearch/Get API key

CVE-1999-1262

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides...

5.1 Medium

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.

Exploit likelihood

1.62%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.1

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.

Record
CVE-1999-1262
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.

Record
CVE-1999-1262
Updated
2026-11-02
EUVDEUVD-1999-1243No score

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.

Record
EUVD-1999-1243
Updated
2026-11-03
GitHub AdvisoriesGHSA-2ccq-2xr5-3q62No score

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides...

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.

Record
GHSA-2ccq-2xr5-3q62
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-1262 is a medium vulnerability (CVSS 5.1) in Netscape Communicator, published August 1, 1997. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. No source names a fixed version.

References

MoveEnter Open