Vulnerability in N/a
CVE-2002-0682
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the serv…
EPSS: 0.831 (99.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 4973 (x_refsource_OSVDB, vdb-entry)
- 5193 (vdb-entry, x_refsource_BID)
- tomcat-servlet-xss(9520) (vdb-entry, x_refsource_XF)
- 20020710 [VulnWatch] wp-02-0008: Apache Tomcat Cross Site Scripting (mailing-list, x_refsource_VULNWATCH)
- 20020710 wp-02-0008: Apache Tomcat Cross Site Scripting (mailing-list, x_refsource_BUGTRAQ)
- [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ (mailing-list, x_refsource_MLIST)
- [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ (mailing-list, x_refsource_MLIST)
- [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ (mailing-list, x_refsource_MLIST)
Frequently asked questions
- What is CVE-2002-0682?
- CVE-2002-0682 is a vulnerability in N/a. Published 2004-09-01.
- Is CVE-2002-0682 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.