CVE-2002-0187 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	14.72%	–	–
2022-04-03	–	–	14.72%	–	–
2023-03-12	–	–	–	0.62%	–
2023-10-29	–	–	–	0.62%	–
2023-11-12	–	–	–	0.62%	–
2023-11-19	–	–	–	0.62%	–
2023-11-26	–	–	–	0.62%	–
2023-12-17	–	–	–	0.62%	–
2024-02-04	–	–	–	0.61%	–
2024-02-11	–	–	–	0.61%	–
2024-06-02	–	–	–	0.61%	–
2024-08-11	–	–	–	1.06%	–
2024-09-15	–	–	–	1.06%	–
2024-09-22	–	–	–	1.06%	–
2024-10-20	–	–	–	1.06%	–
2024-12-22	–	–	–	1.25%	–
2025-02-16	–	–	–	1.25%	–
2025-03-02	–	–	–	1.18%	–
2025-01-19	–	–	–	1.25%	–
2025-02-16	–	–	–	1.25%	–
2025-03-09	–	–	–	1.18%	–
2025-03-18	–	–	–	–	14.16%
2025-03-30	–	–	–	–	18.96%
2025-03-30	–	–	–	–	18.96,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	91%
2022-04-03	96%
2023-03-12	76%
2023-10-29	77%
2023-11-12	76%
2023-11-19	77%
2023-11-26	76%
2023-12-17	77%
2024-02-04	76%
2024-02-11	78%
2024-06-02	79%
2024-08-11	84%
2024-09-15	85%
2024-09-22	84%
2024-10-20	85%
2024-12-22	85%
2025-02-16	86%
2025-03-02	85%
2025-01-19	85%
2025-02-16	86%
2025-03-09	85%
2025-03-18	94%
2025-03-30	95%
2025-03-30	95%

source: https://www.securityfocus.com/bid/5005/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML (Extensible Markup Language) format. Such queries can be sent using various methods of communication, one of which is via HTTP. SQLXML HTTP components reside in a virtual directory on a web server and are not enabled by default. It is possible, under some circumstances, to inject arbitrary script code via XML tags. This may allow an attacker to execute script code in the context of the Internet Explorer Security Zone associated with the IIS server running the vulnerable components. It should be noted that successful exploitation of this vulnerability is highly conditional. Firstly, the victim of the attack must have access to an IIS server running vulnerable versions of the SQLXML HTTP components. The victim of the attack must also have sufficient privileges to pass queries to the underlying SQL server. Lastly, the attacker must also have knowledge of the virtual directory that has been set up on the IIS Server for SQLXML HTTP components. IIS-server/Northwind?sql=SELECT+contactname,+phone+FROM+Customers+FOR+XML&root= <SCRIPT>alert(document.domain)</SCRIPT>