Evil-DB LogoEvil-DB
← All CVEs

CVE-2002-1339

medium · 5

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

5
CVSS
12.0%
EPSS (exploit prob.)
96th
EPSS percentile
2002-12-18
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

VendorProductAffected versions
microsoftoffice_web_components2002

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-1339