CVE-2002-2318: Blueface Falcon Web Server

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.

Affected products

• Blueface Falcon Web Server: version 2.0.0.1009 only; version 2.0.0.1020 only; version 2.0.0.1021 only; version 2.0.0.1021_ssl only

Published 2002-12-31. Last modified 2026-06-16.