AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2002-1286

HIGH · CVSS 7.5 EPSS 20.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-11-29 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Microsoft, Java. Its EPSS score suggests a 20.5% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2002-1286
Severity
HIGH
CVSS
7.5
EPSS
20.50%
Microsoft Java

Original NVD Description

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the security context of the site that is being visited by the user.