Lucene search

[email protected]CVE-2002-1685

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1685

2002-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2002

1685

xss

vulnerability

badblue

enterprise edition

personal edition

remote attackers

arbitrary script

ext.dll isapi

7.1 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.3%

JSON

Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.

CPENameOperatorVersion
working_resources_inc.:badblueworking resources inc. badblueeqpersonal_1.7.2
working_resources_inc.:badblueworking resources inc. badblueeqenterprise_1.7.2
working_resources_inc.:badblueworking resources inc. badblueeqpersonal_1.7

CPE	Name	Operator	Version
working_resources_inc.:badblue	working resources inc. badblue	eq	personal_1.7.2
working_resources_inc.:badblue	working resources inc. badblue	eq	enterprise_1.7.2
working_resources_inc.:badblue	working resources inc. badblue	eq	personal_1.7

References

online.securityfocus.com/archive/1/281088

www.securityfocus.com/bid/5086

exchange.xforce.ibmcloud.com/vulnerabilities/9513

7.1 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.3%

JSON

Related for CVE-2002-1685

cvelist1