Every CVESearch/Get API key

CVE-2002-0691

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local...

7.5 High

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.

Exploit likelihood

13.8%Up 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used7.5

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.

Record
CVE-2002-0691
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.

Record
CVE-2002-0691
Updated
2026-11-02
EUVDEUVD-2002-0683No score

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.

Record
EUVD-2002-0683
Updated
2026-11-03
GitHub AdvisoriesGHSA-h6fv-822m-499vNo score

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local...

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.

Record
GHSA-h6fv-822m-499v
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-0691 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published September 24, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.8%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open