CVE-2002-0187: microsoft sql_server
Vulnerability summary
CVE-2002-0187 is a high (CVSS 7.5) vulnerability in microsoft sql_server. EPSS estimates a 13.89% chance of exploitation in the next 30 days, higher than 96.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 02-04-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
13.89%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 13.89% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft SQL Server 2000 - SQLXML Script Injection
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- sql_server2000 | 2000:sp1 | 2000:sp2
1 vendor · 1 product
References
3 links- archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.htmlMailing ListX Refsource VULNWATCHPatchVendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030Vendor AdvisoryX Refsource MS