CVE-2002-1060

State: Published
Severity: Not scored
Published: Apr 2, 2003
Updated: Aug 8, 2024
Reserved: Aug 30, 2002

Description

Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

5305vdb-entry
20020724 CacheFlow CacheOS Cross-site Scripting Vulnerabilitymailing-list
cacheos-unresolved-error-xss(9674)vdb-entry
http://download.cacheflow.com/release/CA/4.1.00-docs/CACacheOS41fixes.htm
5608vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.