Unscored severity · published Jul 3, 2002
CVE-2002-0187
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL…
–
CVSS
13.9%
EPSS
No
On KEV
Description
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
Exploitation
Is it being used?
Exploit prediction (EPSS)13.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Sql Server · Microsoft
2000; 2000; 2000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0187
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0187
Patch
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html
marc.info
http://marc.info/?l=bugtraq&m=102397345410856&w=2
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030
More from Sql Server
8.8
CVE-2020-0618
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
8.8
CVE-2019-1068
Microsoft SQL Server Remote Code Execution Vulnerability
8.8
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
9.8
CVE-2018-8273
A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution…
8.8
CVE-2023-38169
Microsoft SQL OLE DB Remote Code Execution Vulnerability