CVE-2003-5001mediumCWE-269

CVE-2003-5001: fallo de gravedad media en ISS BlackICE PC Protection

ISS BlackICE PC Protection Cross Site Scripting Detection privileges management

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear BlackICE PC Protection

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 1.0%
A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Productos afectados
ISS · BlackICE PC Protection
CVEs relacionadas — ISS BlackICE PC Protection

En el mismo producto, de las más peligrosas a las menos.

CVE-2003-5003MEDIUMISS BlackICE PC Protection Update cross site scritingEPSS 0.5%CVE-2003-5002LOWISS BlackICE PC Protection Update cleartext transmissionEPSS 0.4%