{
    "id": "CVE-2002-1529",
    "published": "2003-03-31 05:00:00",
    "last_modified": "2026-06-16 21:59:29",
    "cvss_score": "4.3",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "cwe": null,
    "description": "Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.",
    "epss_score": "0.03581",
    "epss_percentile": "0.89048",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-03 18:17:03",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "surfcontrol",
            "product": "superscout_email_filter"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "21924",
            "title": "SurfControl SuperScout Email Filter 3.5 - 'MsgError.asp' Cross-Site Scripting",
            "date": "2002-10-08",
            "url": "https://www.exploit-db.com/exploits/21924"
        }
    ],
    "refs_list": [
        "http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html",
        "http://www.iss.net/security_center/static/10319.php",
        "http://www.securityfocus.com/bid/5928",
        "http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html",
        "http://www.iss.net/security_center/static/10319.php",
        "http://www.securityfocus.com/bid/5928"
    ]
}