What is CVE-2002-1700?

CVE-2002-1700 is a vulnerability in Macromedia Coldfusion, classified under Cross-site Scripting. Published 2002-12-31.

Is CVE-2002-1700 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Macromedia Coldfusion

CVE-2002-1700

Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2002-12-31 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.243 (97.8th percentile), scored 2026-09-29.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 97.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.243 · newest: 0.243 · change: 0.000

Affected products

Macromedia Coldfusion — versions 6.0
Microsoft Internet Information Services — versions 5.0
Microsoft Windows 2000

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

mawinkler/c1-ws-vulnerability-management

References

www.macromedia.com/v1/Handlers/index.cfm
www.securityfocus.com/bid/5011 (vdb-entry)
online.securityfocus.com/archive/1/277487 (mailing-list)
exchange.xforce.ibmcloud.com/vulnerabilities/9360 (vdb-entry)

Frequently asked questions

What is CVE-2002-1700?: CVE-2002-1700 is a vulnerability in Macromedia Coldfusion, classified under Cross-site Scripting. Published 2002-12-31.
Is CVE-2002-1700 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.