Back
CVE-2002-1795
Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: Dec 31, 2002
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| microsoft | tsac_activex_control | * |
GitHub Security Advisory GHSA-9vr6-m4vr-8vc9
Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced...
References (8)
- http://online.securityfocus.com/archive/1/294938
- http://www.iss.net/security_center/static/10342.php Patch
- http://www.lac.co.jp/security/english/snsadv_e/56_e.html
- http://www.securityfocus.com/bid/5952 Patch
- http://online.securityfocus.com/archive/1/294938
- http://www.iss.net/security_center/static/10342.php Patch
- http://www.lac.co.jp/security/english/snsadv_e/56_e.html
- http://www.securityfocus.com/bid/5952 Patch
Risk Scores
CVSS Score
4.3 / 10
EPSS Score
16.79%
Top 3% most likely to be exploited
Threat Score
22.2 / 100
Data Sources
NVD
EPSS
GitHub