CVE-2002-1688

Exploit

EPSS 39.55%
Published 31.12.2002 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version5.5

Microsoft ≫ Internet Explorer Version5.5 Updatesp1

Microsoft ≫ Internet Explorer Version5.5 Updatesp2

Microsoft ≫ Internet Explorer Version6.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	39.55%	0.972

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://online.securityfocus.com/archive/1/267561

http://www.securityfocus.com/bid/4505

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/8844

https://nvd.nist.gov/vuln/detail/CVE-2002-1688

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-1688

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-1688

EUVD