5

CVE-2002-1688

Exploit

EPSS 36.7%
Veröffentlicht 31.12.2002 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version5.5

Microsoft ≫ Internet Explorer Version5.5 Updatesp1

Microsoft ≫ Internet Explorer Version5.5 Updatesp2

Microsoft ≫ Internet Explorer Version6.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	36.7%	0.969

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://online.securityfocus.com/archive/1/267561

http://www.securityfocus.com/bid/4505

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/8844

https://nvd.nist.gov/vuln/detail/CVE-2002-1688

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-1688

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-1688

EUVD