CVE-2002-1167

Published: Nov 4, 2002Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.

Affected (2)

Products: Ibm: Websphere Caching Proxy Server

Ibm

1 product

Websphere Caching Proxy Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Caching Proxy Server	Version 3.6
Ibm Websphere Caching Proxy Server	Version 4.0

References (4)

http://www.iss.net/security_center/static/10453.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/6000

Source: cve@mitre.org

http://www.iss.net/security_center/static/10453.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/6000

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.