Question 1

What is CVE-2002-0187?

Accepted Answer

CVE-2002-0187 is a high-severity software vulnerability with a CVSS score of 7.5. Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."

Question 2

Is CVE-2002-0187 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 14%.

Question 3

What products does CVE-2002-0187 affect?

Accepted Answer

Tracked products affected include Microsoft SQL Server. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2002-0187?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2002-0187

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information