« Volver al listado

CVE-2002-0622

Estado: ModificadaAlta (7.5)—

The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Commerce Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0622",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-07-03T04:00:00.000",
  "references": [
    {
      "url": "http://www.iss.net/security_center/static/9425.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/5170",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/5111",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/9425.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/5170",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/5111",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka \"OWC Package Command Execution\"."
    }
  ],
  "lastModified": "2026-06-16T21:57:47.707",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF65806C-05BF-4EB7-976B-3346F2D64886"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C73B40C1-B8D7-46FB-B327-8C93F2ACDD9D"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD28CDF4-00E9-4F61-8201-76FB44544A33"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}