CVE-2001-0824

Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-12-06

Last modified

2024-08-08

Affected products

• Websphere Application Server (Ibm)

References

• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
• http://www.securityfocus.com/bid/2969