Lucene search

[email protected]CVE-2002-0938

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-0938

2002-10-0404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ciscosecure acs

cross-site scripting

vulnerability

nvd

cve-2002-0938

7.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.5%

JSON

Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.

CPENameOperatorVersion
cisco:secure_access_control_servercisco secure access control servereq3.0.1
cisco:secure_access_control_servercisco secure access control servereq3.0

CPE	Name	Operator	Version
cisco:secure_access_control_server	cisco secure access control server	eq	3.0.1
cisco:secure_access_control_server	cisco secure access control server	eq	3.0

References

archives.neohapsis.com/archives/bugtraq/2002-06/0156.html

online.securityfocus.com/archive/1/278222

www.iss.net/security_center/static/9353.php

www.securityfocus.com/bid/5026

7.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.5%

JSON