How severe is CVE-2002-0094?

CVE-2002-0094 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2002-0094 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-0094?

CVE-2002-0094 primarily affects Fraunhofer Fit Bscw. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2002-0094?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2002-0094 published?

CVE-2002-0094 was published on 2002-03-25 and last updated on 2026-06-16.

CVE-2002-0094

CVE-2002-0094 is a high-severity vulnerability in Fraunhofer Fit Bscw with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 3% (87th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Fraunhofer Fit Bscw
Published: 2002-03-25
Last modified: 2026-06-16

Description

config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.

Frequently asked questions

What is CVE-2002-0094?: config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
How severe is CVE-2002-0094?: CVE-2002-0094 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2002-0094 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-0094?: CVE-2002-0094 primarily affects Fraunhofer Fit Bscw. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2002-0094?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2002-0094 published?: CVE-2002-0094 was published on 2002-03-25 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:fraunhofer_fit:bscw:3.4:*:*:*:*:*:*:*
cpe:2.3:a:fraunhofer_fit:bscw:4.0:*:*:*:*:*:*:*

More vulnerabilities in Fraunhofer Fit Bscw

CVE-2002-0095 — High (CVSS 7.5): The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self…
CVE-2001-0973 — Medium (CVSS 6.4): BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and…

All CVEs affecting Fraunhofer Fit Bscw →