CVE-2002-1168

Published: 04/11/2002 Updated: 10/09/2008

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x prior to 4.0.1.26 allows remote malicious users to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" (CRLF) sequence, which echoes the Location as an HTTP header in the server response.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm websphere caching proxy server 4.0
ibm websphere caching proxy server 3.6

source: wwwsecurityfocuscom/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct a malicious link which contains arbitrary HTML and script code, which will be executed ...

NVD-CWE-Other http://www.iss.net/security_center/static/10454.php http://www.securityfocus.com/bid/6001 https://nvd.nist.gov https://www.exploit-db.com/exploits/21948/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1168

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect