How severe is CVE-2002-1939?

CVE-2002-1939 has a CVSS 2.0 base score of 2.1, rated low severity.

Is CVE-2002-1939 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-1939?

CVE-2002-1939 affects Flashfxp. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2002-1939?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2002-1939 published?

CVE-2002-1939 was published on 2002-12-31 and last updated on 2026-06-16.

CVE-2002-1939

CVE-2002-1939 is a low-severity vulnerability in Flashfxp with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.1)
EPSS exploit prediction: 0% (27th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Flashfxp
Published: 2002-12-31
Last modified: 2026-06-16

Description

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.

Frequently asked questions

What is CVE-2002-1939?: FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.
How severe is CVE-2002-1939?: CVE-2002-1939 has a CVSS 2.0 base score of 2.1, rated low severity.
Is CVE-2002-1939 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-1939?: CVE-2002-1939 affects Flashfxp. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2002-1939?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2002-1939 published?: CVE-2002-1939 was published on 2002-12-31 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:flashfxp:flashfxp:1.4:*:*:*:*:*:*:*

More vulnerabilities in Flashfxp

CVE-2012-4992 — Critical (CVSS 9.0): Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code…
CVE-2007-0825 — High (CVSS 7.8): FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD…
CVE-2003-1483 — Medium (CVSS 6.4): FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and…

All CVEs affecting Flashfxp →