Vulnerability in Surfcontrol Superscout Email Filter

CVE-2002-1529

Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.

EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.

Affected products

Surfcontrol Superscout_email_filter — versions 3.5, 3.5.1, 4.0
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)