CVE-2003-0768

Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the…

published September 12, 2003

CVSS

—

EPSS

13%

Percentile

96.3

In the wild

Unconfirmed

What it is

Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.12999 · 96.3th percentile
Published: 2003-09-12T04:00Z

EPSS history

Timeline

12 SEP 04:00Z
Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the…
cvelistv5