CVE-1999-0468
published 1999-04-09CVE-1999-0468: Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
PriorityP423high8.2CVSS 3.1
AVNACLPRNUINSUCHILAN
EPSS
3.25%
86.9th percentile
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | internet_explorer | — | — |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Internet Explorer 5.0 Scriptlet privileges management (MS99-012 / XFDB-2070)
vuldb·2026-04-19·CVSS 8.2
CVE-1999-0468 [HIGH] Microsoft Internet Explorer 5.0 Scriptlet privileges management (MS99-012 / XFDB-2070)
A vulnerability classified as critical was found in Microsoft Internet Explorer 5.0. Impacted is an unknown function of the component Scriptlet. Executing a manipulation can lead to improper privilege management.
This vulnerability is tracked as CVE-1999-0468. The attack can be launched remotely. No exploit exists.
A patch should be applied to remediate this issue.
GHSA
GHSA-qx62-xr98-6mvc: Internet Explorer 5
ghsa_unreviewed·2022-04-30
CVE-1999-0468 [LOW] GHSA-qx62-xr98-6mvc: Internet Explorer 5
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
1999-04-09
Published