CVE-2002-0787: Critical Path Injoin Directory Server

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.

Affected products

• Critical Path Injoin Directory Server: version 4.0 only

Published 2002-08-12. Last modified 2026-06-16.