CVE-2002-0682

CVE-2002-0682 describes a cross-site scripting (XSS) vulnerability in Apache Tomcat version 4.0.3. This flaw allows remote attackers to execute arbitrary script in the context of other web users by injecting malicious script into a URL utilizing the /servlet/ mapping, specifically when a servlet throws an exception and the script is not properly filtered. The vulnerability carries a CVSS score of 7.5, indicating high severity with network-based attacks, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB, and its EPSS score of 0.83058 suggests a high likelihood of exploitation. Despite this, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.