CVE-2002-2422
Published Dec 31, 2002
Last updated 16 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:compaq:insight_management_agent:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7180311A-5AD5-48E9-B9A4-C12B920C38FC"
},
{
"criteria": "cpe:2.3:a:compaq:insight_management_agent:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5AA5AF8-A420-459B-83D3-59731FC0CC0C"
},
{
"criteria": "cpe:2.3:a:compaq:insight_management_agent:2.1_b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A8ECAEE-30DC-4247-B7DD-A94C986A2F3A"
},
{
"criteria": "cpe:2.3:a:compaq:insight_management_agent:3.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB155AD3-B2A5-481B-A812-A7A4477C27CF"
},
{
"criteria": "cpe:2.3:a:compaq:insight_management_agent:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D6E54F4-8A06-407E-BBED-23F112284C99"
},
{
"criteria": "cpe:2.3:a:compaq:insight_management_agent:4.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "667AC08B-02EC-412A-812A-E5945D7B8337"
}
],
"operator": "OR"
}
]
}
]