CVE-2002-1958

MEDIUM · CVSS 4.3 EPSS 1.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-12-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2002-1958

Severity

MEDIUM

CVSS

4.3

EPSS

1.70%

Java

Original NVD Description

Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or (2) the Subject field.