Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2002-0166
HistoryApr 22, 2002 - 4:00 a.m.

CVE-2002-0166

2002-04-2204:00:00
[email protected]
web.nvd.nist.gov
2

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.019

Percentile

88.4%

JSON

Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.

Affected configurations

Nvd
Node
stephen_turneranalogMatch3.90_beta1
OR
stephen_turneranalogMatch3.90_beta2
OR
stephen_turneranalogMatch4.1
OR
stephen_turneranalogMatch4.01
OR
stephen_turneranalogMatch4.02
OR
stephen_turneranalogMatch4.03
OR
stephen_turneranalogMatch4.04
OR
stephen_turneranalogMatch4.11
OR
stephen_turneranalogMatch4.14
OR
stephen_turneranalogMatch4.15
OR
stephen_turneranalogMatch4.16
OR
stephen_turneranalogMatch4.90_beta2
OR
stephen_turneranalogMatch4.90_beta3
OR
stephen_turneranalogMatch4.90_beta4
OR
stephen_turneranalogMatch4.91_beta1
OR
stephen_turneranalogMatch5.0
OR
stephen_turneranalogMatch5.01
OR
stephen_turneranalogMatch5.1a
OR
stephen_turneranalogMatch5.2
OR
stephen_turneranalogMatch5.02
OR
stephen_turneranalogMatch5.03
VendorProductVersionCPE
stephen_turneranalog3.90_beta1cpe:2.3:a:stephen_turner:analog:3.90_beta1:*:*:*:*:*:*:*
stephen_turneranalog3.90_beta2cpe:2.3:a:stephen_turner:analog:3.90_beta2:*:*:*:*:*:*:*
stephen_turneranalog4.1cpe:2.3:a:stephen_turner:analog:4.1:*:*:*:*:*:*:*
stephen_turneranalog4.01cpe:2.3:a:stephen_turner:analog:4.01:*:*:*:*:*:*:*
stephen_turneranalog4.02cpe:2.3:a:stephen_turner:analog:4.02:*:*:*:*:*:*:*
stephen_turneranalog4.03cpe:2.3:a:stephen_turner:analog:4.03:*:*:*:*:*:*:*
stephen_turneranalog4.04cpe:2.3:a:stephen_turner:analog:4.04:*:*:*:*:*:*:*
stephen_turneranalog4.11cpe:2.3:a:stephen_turner:analog:4.11:*:*:*:*:*:*:*
stephen_turneranalog4.14cpe:2.3:a:stephen_turner:analog:4.14:*:*:*:*:*:*:*
stephen_turneranalog4.15cpe:2.3:a:stephen_turner:analog:4.15:*:*:*:*:*:*:*
Rows per page:
1-10 of 211

Related

nessus 1
cve 1
openvas 2
cvelist 1
nessus
nessus
Debian DSA-125-1 : analog - XSS
2004-09-29 00:00:00
cve
cve
CVE-2002-0166
2002-06-25 04:00:00
openvas
openvas
Debian Security Advisory DSA 125-1 (analog)
2008-01-17 00:00:00
Debian Security Advisory DSA 125-1 (analog)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2002-0166
2002-06-25 04:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.019

Percentile

88.4%

JSON
Related for NVD:CVE-2002-0166
nessus1cve1openvas2cvelist1