Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0622
office web components
owc
package installer
microsoft commerce server 2000
remote attackers
command execution
security vulnerability
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.043 Low
EPSS
Percentile
92.3%
The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka “OWC Package Command Execution”.
Affected configurations
Node
microsoftcommerce_serverMatch2000
ORmicrosoftcommerce_serverMatch2000sp1
ORmicrosoftcommerce_serverMatch2000sp2
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:commerce_server | microsoft commerce server | eq | 2000 |
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.043 Low
EPSS
Percentile
92.3%
Related for CVE-2002-0622