CVE-2002-1260
high · 7.5The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.
7.5
CVSS
15.5%
EPSS (exploit prob.)
97th
EPSS percentile
2002-12-23
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000_terminal_services | all versions |
| microsoft | windows_2000_terminal_services | all versions |
| microsoft | windows_2000_terminal_services | all versions |
| microsoft | windows_2000_terminal_services | all versions |
| microsoft | windows_95 | all versions |
| microsoft | windows_95 | all versions |
| microsoft | windows_98 | all versions |
| microsoft | windows_98se | all versions |
| microsoft | windows_me | all versions |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_nt | 4.0 |
Check a specific version with /api/v1/cve/match.
References
- http://www.ciac.org/ciac/bulletins/n-026.shtml
- http://www.securityfocus.com/bid/6379
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10833
- http://www.ciac.org/ciac/bulletins/n-026.shtml
- http://www.securityfocus.com/bid/6379
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10833
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2002-1260