Question 1

What is CVE-2002-0807?

Accepted Answer

CVE-2002-0807 is a high-severity software vulnerability with a CVSS score of 7.5. Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editus

Question 2

Is CVE-2002-0807 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2002-0807 affect?

Accepted Answer

Tracked products affected include Bugzilla. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2002-0807?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2002-0807

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information