CVE-2002-1529

Опубликовано: 31 мар. 2003

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/10319.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5928
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/10319.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5928
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:surfcontrol:superscout_email_filter:3.5:*:*:*:*:*:*:*

cpe:2.3:a:surfcontrol:superscout_email_filter:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:surfcontrol:superscout_email_filter:4.0:*:smtp:*:*:*:*:*

EPSS

Процентиль: 74%

0.00879

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-684w-4359-88q5

github

больше 3 лет назад