CVE-2000-0189 medium

Description

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (2)

• cve@mitre.org NVD Recent CVEs
• NVD detail: CVE-2000-0189 NVD Recent CVEs

  ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.

• Vulnerability Remediation: how fast should you patch?
  web:allaboutgrc.com

  Vulnerability Remediation : how fast should you patch ? This is a collection of statistics I gather on the topic of vulnerability remediation timelines.

  2026-05-22 20:46 UTC
• How to Fix CVEs | Step-by-Step Vulnerability Management Guide
  web:cve.akaoma.com

  Learn how to identify, prioritize, and patch CVEs effectively to secure your systems. A detailed step-by-step guide for vulnerability management.

  2026-05-22 20:46 UTC
• ‎Google Gemini
  web:gemini.google.com

  Meet Gemini, Google's AI assistant. Get help with writing, planning, brainstorming, and more. Experience the power of generative AI.

  2026-05-22 20:46 UTC
• PDF Guide to Enterprise Patch Management Planning: - NIST
  web:nvlpubs.nist.gov

  The third version, SP 800-40, Revision 3, Guide to Enterprise Patch Management Technologies (2013), was written under the assumption that readers already understood the basics of patch management and that what they most needed help with was implementing, configuring, securing, and using enterprise patch management technologies.

  2026-05-22 20:46 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-22 20:46 UTC
• Vulnerability Patching: Why It's Critical & How to Do It Right
  web:tuxcare.com

  It includes discovering vulnerabilities, evaluating their potential impact, prioritizing remediation efforts (including patching), and confirming the fixes. Patch Management Patch management, on the other hand, is the act of applying the necessary updates to fix known vulnerabilities. It's a critical component of vulnerability management.

  2026-05-22 20:46 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-05-22 20:46 UTC
• Software Patching Best Practices: Don't Skip Updates | Infosec
  web:www.infosecinstitute.com

  You can treat vulnerabilities in three ways: Remediate: Apply the patch or update to the software or system, so it's safe from exploitation. Mitigate: If remediation isn't an option because there is no patch or there are issues in updating the applications, then you move to mitigate.

  2026-05-22 20:46 UTC
• Vertex Explosion Fix (disables face customization)
  web:www.nexusmods.com

  This mod aims to fix ( or drastically minimize) vertex explosions on shadps4 by removing certain files related to face customization that the emulator is not currently handling correctly

  2026-05-22 20:46 UTC
• Oracle Critical Patch Update Advisory - April 2026
  web:www.oracle.com

  This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

  2026-05-22 20:46 UTC

Only Available for Registered Users. Sign in to view.