H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

XSS Targeting Error Pages

An adversary distributes a link (or possibly some other query structure) with a request to a third party web server that is malformed and also contains a block of exploit code in order to have the exploit become live code in the resulting error page.

Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

An adversary distributes a link (or possibly some other query structure) with a request to a third party web server that is malformed and also contains a block of exploit code in order to have the exploit become live code in the resulting error page.

Labels

attack-patterncapec
3 recorded

Relationships

child-of
to DOM-Based XSS
Technique
child-of
to Reflected XSS
Technique
child-of
to Stored XSS
Technique
1 external

References

capec
CAPEC-198
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance