How severe is CVE-2003-0769?

CVE-2003-0769 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2003-0769 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2003-0769?

CVE-2003-0769 primarily affects Mirabilis Icq. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2003-0769?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2003-0769 published?

CVE-2003-0769 was published on 2003-09-22 and last updated on 2026-06-16.

CVE-2003-0769

CVE-2003-0769 is a medium-severity vulnerability in Mirabilis Icq with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 3% (87th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Mirabilis Icq
Published: 2003-09-22
Last modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.

Frequently asked questions

What is CVE-2003-0769?: Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.
How severe is CVE-2003-0769?: CVE-2003-0769 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2003-0769 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2003-0769?: CVE-2003-0769 primarily affects Mirabilis Icq. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2003-0769?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2003-0769 published?: CVE-2003-0769 was published on 2003-09-22 and last updated on 2026-06-16.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0769

Affected products (3)

cpe:2.3:a:mirabilis:icq:2003a_build3777:*:*:*:*:*:*:*
cpe:2.3:a:mirabilis:icq:2003a_build3799:*:*:*:*:*:*:*
cpe:2.3:a:mirabilis:icq:2003a_build3800:*:*:*:*:*:*:*

More vulnerabilities in Mirabilis Icq

CVE-2002-2329 — High (CVSS 7.8): ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a…
CVE-2006-4662 — High (CVSS 7.5): Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote…
CVE-2003-0235 — High (CVSS 7.5): Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute…
CVE-2003-0237 — High (CVSS 7.5): The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of…
CVE-2003-0236 — High (CVSS 7.5): Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary…
CVE-2002-0028 — High (CVSS 7.5): Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a…

All CVEs affecting Mirabilis Icq →