CVE-2002-1567

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded…

published September 19, 2003

CVSS
—
EPSS
27%
Percentile
98.0
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27079 · 98.0th percentile
Published
2003-09-19T04:00Z
EPSS history
Timeline
  • 19 SEP 04:00Z
    Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded…
    cvelistv5