PT-2002-1580 · Novell · Novell Web Search

Published 2002-06-11 · Updated 2008-09-10 · CVE-2002-0530

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell Web Search version 2.0.1

Description A cross-site scripting issue allows remote attackers to execute arbitrary script as other Web Search users via the search parameter in the API endpoint.

Recommendations For Novell Web Search version 2.0.1, avoid using the search parameter in the affected API endpoint until the issue is resolved.

Fix

Related Identifiers

CVE-2002-0530

Affected Products

Novell Web Search

References · 3

• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0010.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0530 · Security Note
• http://seclists.org/bugtraq/2002/Apr/0126.html · Note