CVE-2002-2186

3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.9%
top 25.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Macromedia Jrun
Timeline
PublishedDec 31
Latest updateApr 30

Description

Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmacromedia/jrun3.0, 3.1, 4.0+2

Patches

Patch: www.iss.net ↗Patch: www.macromedia.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w932-f265-m42g: Macromedia JRun 3↗2022-04-30
▶
CVEList
CVE-2002-2186: Macromedia JRun 3↗2005-11-16
▶
CVE-2002-2186 (MEDIUM CVSS 5) | Macromedia JRun 3.0 | cvebase.io