CVE-2002-1167

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-11-04 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.

Affected products

IBM Websphere Caching Proxy Server: 3.6, 4.0

References

http://www.iss.net/security_center/static/10453.php
http://www.securityfocus.com/bid/6000
http://www.iss.net/security_center/static/10453.php
http://www.securityfocus.com/bid/6000

Get alerted when CVE-2002-1167 or the next vulnerability affects your stack