Lucene search

K
cveMitreCVE-2002-0787
HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0787

2002-08-1204:00:00
mitre
web.nvd.nist.gov
33
vulnerability
xss
icon
critical path
injoin directory server 4.0
remote attackers
administrator
script execution

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.032

Percentile

91.2%

Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.

Affected configurations

Nvd
Node
critical_pathinjoin_directory_serverMatch4.0
VendorProductVersionCPE
critical_pathinjoin_directory_server4.0cpe:2.3:a:critical_path:injoin_directory_server:4.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.032

Percentile

91.2%

Related for CVE-2002-0787