Lucene search

[email protected]CVE-2002-1700

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1700

2002-12-3105:00:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2002-1700

cross-site scripting

xss

macromedia coldfusion mx

remote attackers

http request

404 error message

6.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

84.7%

JSON

Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.

CPENameOperatorVersion
microsoft:internet_information_servicesmicrosoft internet information serviceseq5.0
macromedia:coldfusionmacromedia coldfusioneq6.0
microsoft:windows_2000microsoft windows 2000eq*

CPE	Name	Operator	Version
microsoft:internet_information_services	microsoft internet information services	eq	5.0
macromedia:coldfusion	macromedia coldfusion	eq	6.0
microsoft:windows_2000	microsoft windows 2000	eq	*

References

online.securityfocus.com/archive/1/277487

www.macromedia.com/v1/Handlers/index.cfm?ID=23047

www.securityfocus.com/bid/5011

exchange.xforce.ibmcloud.com/vulnerabilities/9360

6.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

84.7%

JSON

Related for CVE-2002-1700

nessus1