Unscored severity · published Dec 31, 2002
CVE-2002-2189
Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link
–
CVSS
6.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Activwebserver · Activxperts Software
All versions, or not specified · source: NVD
W2
Windows 2003 Server · Microsoft
r2 · source: NVD