CVEvulnerability
CVE-2002-1167
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-11-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.
Affected configurations
• ibm websphere caching proxy server 3.6
• ibm websphere caching proxy server 4.0
References
- http://www.iss.net/security_center/static/10453.php Vendor Advisory
- http://www.securityfocus.com/bid/6000 www.securityfocus.com
- http://www.iss.net/security_center/static/10453.php Vendor Advisory
- http://www.securityfocus.com/bid/6000 www.securityfocus.com