Unscored CVE-2001-0824 EUVD-2001-0808GHSA-fj7j-6rv7-xjr4

Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascr…

Published Nov 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.

References

20010702 Multiple Vendor Java Servlet Container Cross-Site Scripting Vulnerability mailing-list
2969 vdb-entry