CVE-2002-1529: Surfcontrol Superscout Email Filter

Medium severity, CVSS 4.3. EPSS: 3.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.

Affected products

• Surfcontrol Superscout Email Filter: version 3.5 only; version 3.5.1 only; version 4.0 only

Published 2003-03-31. Last modified 2026-06-16.