VulnerabilityModified

CVE-2002-1167

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.

MEDIUM 6.8EPSS 3.28%

Does this matter?

Lower severity and a low EPSS score (3.28%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 3.28% probability · 88th percentile
CISA KEV: Not listed
Affected: ibm/websphere caching proxy server
Source: cve@mitre.org

References

http://www.iss.net/security_center/static/10453.phpVendor Advisory
http://www.securityfocus.com/bid/6000
http://www.iss.net/security_center/static/10453.phpVendor Advisory
http://www.securityfocus.com/bid/6000

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.