Lucene search

MitreCVE-2002-2189

HistoryNov 16, 2005 - 9:17 p.m.

CVE-2002-2189

2005-11-1621:17:00

mitre

web.nvd.nist.gov

cve-2002-2189

cross-site scripting

xss

activexperts software

activewebserver

vulnerability

nvd

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

74.5%

JSON

Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link.

Affected configurations

Nvd

Node

activxperts_softwareactivwebserver

Node

microsoftwindows_2003_serverMatchr2

VendorProductVersionCPE
activxperts_softwareactivwebserver*cpe:2.3:a:activxperts_software:activwebserver:*:*:*:*:*:*:*:*
microsoftwindows_2003_serverr2cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
activxperts_software	activwebserver	*	cpe:2.3:a:activxperts_software:activwebserver::::::::
microsoft	windows_2003_server	r2	cpe:2.3:o:microsoft:windows_2003_server:r2:::::::*

References

www.iss.net/security_center/static/9540.php

www.securiteam.com/windowsntfocus/5MP0C0K7PM.html

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

74.5%

JSON

Related for CVE-2002-2189