AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2002-0840

MEDIUM · CVSS 6.8 EPSS 94.01%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-10-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2002-0840
Severity
MEDIUM
CVSS
6.8
EPSS
94.01%
Apache

Original NVD Description

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.