Vulnerability Details CVE-2002-0205
Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=101189911121808&w=2
- http://online.securityfocus.com/archive/82/248396
- http://www.iss.net/security_center/static/7817.php
- http://www.securityfocus.com/bid/3799
- http://marc.info/?l=bugtraq&m=101189911121808&w=2
- http://online.securityfocus.com/archive/82/248396
- http://www.iss.net/security_center/static/7817.php
- http://www.securityfocus.com/bid/3799
Products affected by CVE-2002-0205
-
cpe:2.3:a:plumtree:plumtree_corporate_portal:3.5
-
cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0
-
cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0_sp1
-
cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0i
-
cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0i_sp1
-
cpe:2.3:a:plumtree:plumtree_corporate_portal:4.5