CVE-2002-1060

Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

4.87% chance of exploitation in the next 30 days, 91th percentile

Published

2003-04-02

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21649

References

• CVE Record
• NVD entry

Related

• CVE-2002-1059
• CVE-2002-1069
• CVE-2002-1058
• CVE-2002-1070
• CVE-2002-1057
• CVE-2002-1071