CVE-2002-1286
3 documents3 sources
Severity
7.5HIGH
EPSS
7.0%
top 8.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 29
Latest updateApr 30
Description
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the security context of the site that is being visited by the user.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4
Affected Packages1 packages
🔴Vulnerability Details
2GHSA▶
GHSA-7633-2p6v-h7c8: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security c↗2022-04-30
CVEList▶
CVE-2002-1286: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security c↗2002-11-14