Vulnerability CVE-2001-1441
Published: 2001-07-02   Modified: 2012-02-12

Description:
Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message.

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
IBM -> Visualage for java 

 References:
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.kb.cert.org/vuls/id/270083
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
Copyright 2024, cxsecurity.com

 

Back to Top