CVE-2002-2115
Published Dec 31, 2002
Last updated 16 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hns:hns:2.00_pl0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6D386DF-9A76-4782-97A2-A84E7D63D3FF"
},
{
"criteria": "cpe:2.3:a:hns:hns:2.00_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC967EEA-FB91-4C21-A721-81159D266AAA"
},
{
"criteria": "cpe:2.3:a:hns:hns:2.00_pl2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B49B0029-8352-4DB1-B881-DFD94B6963A4"
},
{
"criteria": "cpe:2.3:a:hns:hns:2.00_pl3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D970BA0-485B-4E82-B882-745A6981C940"
},
{
"criteria": "cpe:2.3:a:hns:hns:2.00_pl4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F12B7C4-0E4C-49CC-94DB-46117EF6A391"
},
{
"criteria": "cpe:2.3:a:hns:hns:2.10_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66A9536C-8A8F-4FBA-AA0B-5B1F9B381B3E"
},
{
"criteria": "cpe:2.3:a:hns:hns-lite:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82FDA6AD-EE3F-4F59-9961-B6118CDD25A0"
},
{
"criteria": "cpe:2.3:a:hns:hns-lite:0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0443C2D0-8D23-40E7-A9DB-688C80C91F2A"
},
{
"criteria": "cpe:2.3:a:hns:hns-lite:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B120C7A6-1E0C-40B3-9B1C-AF8D6E1D1C7B"
}
],
"operator": "OR"
}
]
}
]