AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2003-1026

HIGH · CVSS 9.3 EPSS 39.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-01-20 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It affects Java. Its EPSS score suggests a 39.2% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2003-1026
Severity
HIGH
CVSS
9.3
EPSS
39.21%
Java

Original NVD Description

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."