Lucene search
HistoryJul 03, 2002 - 4:00 a.m.
CVE-2002-0187
cve-2002-0187
sql server 2000
xss vulnerability
sqlxml
script injection
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.6%
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka “Script Injection via XML Tag.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:sql_server | microsoft sql server | eq | 2000 |
Related
cert
cert
securityvulns
securityvulns
wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting
2002-06-13 00:00:00
nessus
nessus
MS02-030: Unchecked Buffer in SQLXML (321911)
2003-03-02 00:00:00
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.6%
Related for CVE-2002-0187