Vulnerability Details : CVE-2002-0727
The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
Products affected by CVE-2002-0727
- cpe:2.3:a:microsoft:project:2002:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_web_components:2000:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2002-0727
1.66%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 87 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-0727
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2002-0727
Jump to