{"id":"CVE-2002-1167","aliases":["EUVD-2002-1151","GHSA-wpq5-crjc-xv3c"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and...","description":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03278,"percentile":0.88509,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-10-25T04:00:00Z","modified":"2026-06-16T21:58:51Z","exploits":[{"source":"exploitdb","id":"EDB-21947","title":"IBM Websphere Edge Server 3.6/4.0 - Cross-Site Scripting","type":"remote","platform":"unix","date":"2002-10-23","verified":true,"url":"https://www.exploit-db.com/exploits/21947"}],"products":[{"vendor":"ibm","product":"websphere_caching_proxy_server"}],"references":[{"url":"http://www.securityfocus.com/bid/6000","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.iss.net/security_center/static/10453.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1167"},{"url":"https://github.com/advisories/GHSA-wpq5-crjc-xv3c"}],"sources":{"cve":[{"id":"CVE-2002-1167","description":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.","status":"published","published":"2002-10-25T04:00:00Z","modified":"2024-08-08T03:19:27.433Z","updated_at":"2026-11-02T14:33:54.641433Z"}],"euvd":[{"id":"EUVD-2002-1151","description":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.","status":"published","published":"2002-10-25T04:00:00Z","modified":"2024-08-08T03:19:27Z","updated_at":"2026-11-03T01:14:57.2805Z"}],"ghsa":[{"id":"GHSA-wpq5-crjc-xv3c","title":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and...","description":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.","status":"published","published":"2022-04-30T18:20:40Z","modified":"2023-01-30T05:06:23Z","updated_at":"2026-11-02T14:47:29.130906Z"}],"nvd":[{"id":"CVE-2002-1167","description":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.","status":"published","published":"2002-11-04T05:00:00Z","modified":"2026-06-16T21:58:51.997Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.239725Z"}]}}