CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-0840

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.92

EPSS Ranking 99.7%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2002-0840

Apache » Http Server » Version: 1.3

cpe:2.3:a:apache:http_server:1.3
Apache » Http Server » Version: 1.3.1

cpe:2.3:a:apache:http_server:1.3.1
Apache » Http Server » Version: 1.3.11

cpe:2.3:a:apache:http_server:1.3.11
Apache » Http Server » Version: 1.3.12

cpe:2.3:a:apache:http_server:1.3.12
Apache » Http Server » Version: 1.3.14

cpe:2.3:a:apache:http_server:1.3.14
Apache » Http Server » Version: 1.3.17

cpe:2.3:a:apache:http_server:1.3.17
Apache » Http Server » Version: 1.3.18

cpe:2.3:a:apache:http_server:1.3.18
Apache » Http Server » Version: 1.3.19

cpe:2.3:a:apache:http_server:1.3.19
Apache » Http Server » Version: 1.3.20

cpe:2.3:a:apache:http_server:1.3.20
Apache » Http Server » Version: 1.3.22

cpe:2.3:a:apache:http_server:1.3.22
Apache » Http Server » Version: 1.3.23

cpe:2.3:a:apache:http_server:1.3.23
Apache » Http Server » Version: 1.3.24

cpe:2.3:a:apache:http_server:1.3.24
Apache » Http Server » Version: 1.3.25

cpe:2.3:a:apache:http_server:1.3.25
Apache » Http Server » Version: 1.3.26

cpe:2.3:a:apache:http_server:1.3.26
Apache » Http Server » Version: 1.3.3

cpe:2.3:a:apache:http_server:1.3.3
Apache » Http Server » Version: 1.3.4

cpe:2.3:a:apache:http_server:1.3.4
Apache » Http Server » Version: 1.3.6

cpe:2.3:a:apache:http_server:1.3.6
Apache » Http Server » Version: 1.3.9

cpe:2.3:a:apache:http_server:1.3.9
Apache » Http Server » Version: 2.0

cpe:2.3:a:apache:http_server:2.0
Apache » Http Server » Version: 2.0.28

cpe:2.3:a:apache:http_server:2.0.28
Apache » Http Server » Version: 2.0.32

cpe:2.3:a:apache:http_server:2.0.32
Apache » Http Server » Version: 2.0.35

cpe:2.3:a:apache:http_server:2.0.35
Apache » Http Server » Version: 2.0.36

cpe:2.3:a:apache:http_server:2.0.36
Apache » Http Server » Version: 2.0.37

cpe:2.3:a:apache:http_server:2.0.37
Apache » Http Server » Version: 2.0.38

cpe:2.3:a:apache:http_server:2.0.38
Apache » Http Server » Version: 2.0.39

cpe:2.3:a:apache:http_server:2.0.39
Apache » Http Server » Version: 2.0.40

cpe:2.3:a:apache:http_server:2.0.40
Apache » Http Server » Version: 2.0.41

cpe:2.3:a:apache:http_server:2.0.41
Apache » Http Server » Version: 2.0.42

cpe:2.3:a:apache:http_server:2.0.42
Oracle » Application Server » Version: 1.0.2

cpe:2.3:a:oracle:application_server:1.0.2
Oracle » Application Server » Version: 1.0.2.1s

cpe:2.3:a:oracle:application_server:1.0.2.1s
Oracle » Application Server » Version: 1.0.2.2

cpe:2.3:a:oracle:application_server:1.0.2.2
Oracle » Application Server » Version: 9.0.2

cpe:2.3:a:oracle:application_server:9.0.2
Oracle » Application Server » Version: 9.0.2.1

cpe:2.3:a:oracle:application_server:9.0.2.1
Oracle » Database Server » Version: 8.1.7

cpe:2.3:a:oracle:database_server:8.1.7
Oracle » Database Server » Version: 9.2.1

cpe:2.3:a:oracle:database_server:9.2.1
Oracle » Database Server » Version: 9.2.2

cpe:2.3:a:oracle:database_server:9.2.2
Oracle » Oracle8i » Version: 8.1.7

cpe:2.3:a:oracle:oracle8i:8.1.7
Oracle » Oracle8i » Version: 8.1.7.1

cpe:2.3:a:oracle:oracle8i:8.1.7.1
Oracle » Oracle8i » Version: 8.1.7_.0.0_enterprise

cpe:2.3:a:oracle:oracle8i:8.1.7_.0.0_enterprise
Oracle » Oracle8i » Version: 8.1.7_.1.0_enterprise

cpe:2.3:a:oracle:oracle8i:8.1.7_.1.0_enterprise
Oracle » Oracle9i » Version: 9.0

cpe:2.3:a:oracle:oracle9i:9.0
Oracle » Oracle9i » Version: 9.0.1

cpe:2.3:a:oracle:oracle9i:9.0.1
Oracle » Oracle9i » Version: 9.0.1.2

cpe:2.3:a:oracle:oracle9i:9.0.1.2
Oracle » Oracle9i » Version: 9.0.1.3

cpe:2.3:a:oracle:oracle9i:9.0.1.3
Oracle » Oracle9i » Version: 9.0.2

cpe:2.3:a:oracle:oracle9i:9.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-0840

Products

Pricing

Contact Us