CVE-2002-0664
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x...
CVE-2002-0664 is a high vulnerability (CVSS 7.5) in Granite Software Zmerge, published September 10, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 70th percentile. No source names a fixed version.
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.
Exploit likelihood
What each source reports
NVD Score used
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.
- Record
CVE-2002-0664- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.
- Record
CVE-2002-0664- Updated
- 2026-11-02
EUVDEUVD-2002-0658 No score
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.
- Record
EUVD-2002-0658- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2fh8-pjc2-m3v7 No score
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x...
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.
- Record
GHSA-2fh8-pjc2-m3v7- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |