Lucene search
MitreCVE-2002-1167HistoryNov 04, 2002 - 5:00 a.m.
CVE-2002-1167
2002-11-0405:00:00
mitre
web.nvd.nist.gov
26
security
vulnerability
xss
ibm
web traffic express
caching proxy server
remote execution
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
High
EPSS
0.01
Percentile
83.5%
Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.
Affected configurations
Node
ibmwebsphere_caching_proxy_serverMatch3.6
ORibmwebsphere_caching_proxy_serverMatch4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_caching_proxy_server | 3.6 | cpe:2.3:a:ibm:websphere_caching_proxy_server:3.6:*:*:*:*:*:*:* |
| ibm | websphere_caching_proxy_server | 4.0 | cpe:2.3:a:ibm:websphere_caching_proxy_server:4.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2002-1167
2002-11-04 05:00:00
securityvulns
securityvulns
IBM Edge Components Caching Proxy crossite scripting
2012-07-09 00:00:00
cvelist
cvelist
CVE-2002-1167
2002-10-25 04:00:00
exploitdb
exploitdb
IBM Websphere Edge Server 3.6/4.0 - Cross-Site Scripting
2002-10-23 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
High
EPSS
0.01
Percentile
83.5%
Related for CVE-2002-1167