VulnerabilityModified
CVE-2002-0187
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
HIGH 7.5EPSS 13.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.9%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 13.89% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/sql server
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.htmlPatch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102397345410856&w=2
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.htmlPatch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102397345410856&w=2
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.