CVE-2002-2062 : Détail

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	13.33%	–	–
2022-04-03	–	–	13.33%	–	–
2022-07-17	–	–	13.33%	–	–
2022-07-24	–	–	13.33%	–	–
2022-09-11	–	–	13.33%	–	–
2023-03-12	–	–	–	95.97%	–
2023-11-05	–	–	–	94.24%	–
2024-02-11	–	–	–	16.2%	–
2024-03-17	–	–	–	17.54%	–
2024-06-02	–	–	–	17.19%	–
2024-06-02	–	–	–	17.19%	–
2024-09-22	–	–	–	94.04%	–
2024-12-22	–	–	–	92.04%	–
2025-01-19	–	–	–	92.04%	–
2025-03-18	–	–	–	–	10.94%
2025-03-30	–	–	–	–	8.85%
2025-04-11	–	–	–	–	9.35%
2025-04-11	–	–	–	–	9.35,%

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Date	Percentile
2022-02-06	91%
2022-04-03	95%
2022-07-17	96%
2022-07-24	95%
2022-09-11	96%
2023-03-12	99%
2023-11-05	99%
2024-02-11	96%
2024-03-17	96%
2024-06-02	96%
2024-06-02	96%
2024-09-22	99%
2024-12-22	99%
2025-01-19	99%
2025-03-18	93%
2025-03-30	92%
2025-04-11	92%
2025-04-11	92%

source: https://www.securityfocus.com/bid/4954/info A cross site scripting issue has been reported with some versions of Microsoft Internet Explorer for Windows. Under some configurations, data included within a FTP URL will be rendered as displayed content, allowing the execution of arbitrary JavaScript code within the Local Computer context. If both of the 'Enable folder view for FTP sites' and 'Enable Web content in folders' options are enabled, this vulnerability exists. These options are enabled by default. When a folder is being viewed through FTP, the FTP server name is included in the Web Content information displayed. The FTP server name is not sanitized. A malicious link may define a server name which includes HTML content, including script code. When displayed, this script code will execute within the Local Computer context. This vulnerability has been confirmed to exist under Windows 2000. Other versions of Windows may share this vulnerability. This has not, however, been confirmed. <a href="ftp://%22%3e%3cscript%3ealert(%22Exploit%22)%3b%3c%2fscript%3e%20" target="_blank">Exploit</a>