Login Request a demo
Unscored severity · published Dec 31, 2002
CVE-2002-1651
Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Search97 · Verity
2.1 · source: NVD
Affected product
SE
Search97
Verity
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1651
Patch
http://www.kb.cert.org/vuls/id/636431
Patch
http://www.securityfocus.com/bid/5102
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/9441