Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-1700
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
High
EPSS
0.016
Percentile
87.2%
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
Affected configurations
Node
macromediacoldfusionMatch6.0
ORmicrosoftinternet_information_servicesMatch5.0
Node
microsoftwindows_2000
| Vendor | Product | Version | CPE |
|---|---|---|---|
| macromedia | coldfusion | 6.0 | cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:* |
| microsoft | internet_information_services | 5.0 | cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2002-1700
2005-06-21 04:00:00
cve
cve
CVE-2002-1700
2005-06-21 04:00:00
exploitdb
exploitdb
ColdFusion MX - Missing Template Cross-Site Scripting
2002-06-13 00:00:00
nessus
nessus
Web Server Generic XSS
2001-11-30 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
High
EPSS
0.016
Percentile
87.2%
Related for NVD:CVE-2002-1700