VulnerabilityModified
CVE-2002-1685
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.
MEDIUM 4.3EPSS 7.29%
Does this matter?
Lower severity and a low EPSS score (7.29%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 7.29% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- working resources inc./badblue
- Source
- cve@mitre.org
References
- http://online.securityfocus.com/archive/1/281088
- http://www.securityfocus.com/bid/5086Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9513
- http://online.securityfocus.com/archive/1/281088
- http://www.securityfocus.com/bid/5086Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9513
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.