Unrated severityNVD Advisory· Published Jul 3, 2002· Updated Apr 16, 2026

CVE-2002-0622

Description

The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".

Affected products

Microsoft/Commerce Server3 versions
cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.iss.net/security_center/static/9425.phpnvd
www.osvdb.org/5170nvd
www.securityfocus.com/bid/5111nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000