VulnerabilityModified

CVE-2002-2115

Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML.

MEDIUM 4.3EPSS 1.16%

Does this matter?

Lower severity and a low EPSS score (1.16%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML.

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 1.16% probability · 65th percentile
CISA KEV: Not listed
Affected: hns/hns · hns/hns-lite
Source: cve@mitre.org

References

http://www.h14m.org/SA/2002/hns-SA-2002-01.txt
http://www.iss.net/security_center/static/8204.phpPatch
http://www.securityfocus.com/bid/4102Patch
http://www.h14m.org/SA/2002/hns-SA-2002-01.txt
http://www.iss.net/security_center/static/8204.phpPatch
http://www.securityfocus.com/bid/4102Patch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.