CVE-2001-1441 - Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attack

CVE-2001-1441

Summary

Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message.

References

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.kb.cert.org/vuls/id/270083
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793

Vulnerable Configurations

cpe:2.3:a:ibm:visualage_for_java:3.5:*:pro:*:*:*:*:*
cpe:2.3:a:ibm:visualage_for_java:3.5:*:pro:*:*:*:*:*

CVSS

Base:	6.8 (as of 11-07-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bugtraq	20010702 Multiple Vendor Java Servlet Container Cross-Site Scripting Vulnerability
cert-vn	VU#270083
xf	java-servlet-crosssite-scripting(6793)

Last major update

11-07-2017 - 01:29

Published

02-07-2001 - 04:00

Last modified

11-07-2017 - 01:29