CVE-2002-1484
Critical · 9.8CVSS
9.8
EPSS
13.7%
Published
Apr 22, 2003
CISA due date
—
The record
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-78682 NLTK before 3.10.3 contains a server-side request forgery vulnerability in… CWE-918
- CVE-2026-75975 fast-uri is a URI parser for Node.js. CWE-918
- CVE-2026-75899 fast-uri is a URI parser for Node.js. CWE-918
- CVE-2026-63311 NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery… CWE-918
- CVE-2026-71428 The unstructured library provides open-source components for ingesting and pre-processing… CWE-918
- CVE-2026-49478 Fulcio is a certificate authority for issuing code signing certificates for an OpenID… CWE-918
- CVE-2026-69198 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in… CWE-918
- CVE-2026-69192 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in… CWE-918