6.8
CVSSv2

CVE-2002-1167

Published: 04/11/2002 Updated: 10/09/2008
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x prior to 4.0.1.26 allows remote malicious users to execute script as other users via an HTTP GET request.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere caching proxy server 4.0

ibm websphere caching proxy server 3.6

Exploits

source: wwwsecurityfocuscom/bid/6000/info A vulnerability has been discoverered in the Caching Proxy component bundled with the IBM Websphere Edge Server It has been reported that the Caching Proxy is vulnerable to cross site scripting attacks Due to insufficient sanitization of user-supplied input it is possible for an attacker to con ...