Cross-Site Scripting Vulnerability in Cobalt RAQ 4 by Cobalt Networks
CVE-2002-0346
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 25 June 2002
Badges
What is CVE-2002-0346?
The vulnerability allows remote attackers to inject arbitrary scripts into web pages viewed by Cobalt RAQ 4 users. By exploiting this flaw, attackers can leverage crafted URLs to execute malicious JavaScript code through the affected service scripts (service.cgi and alert.cgi). This unauthorized script execution poses a significant risk as it can lead to unauthorized access to user sessions or sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
EPSS Score
12% chance of being exploited in the next 30 days.
Timeline
- π‘
Public PoC available
- πΎ
Exploit known to exist
Vulnerability published
Vulnerability Reserved