VDB

GCVE-110-CERTCC-2001-270083

GCVE-110-CERTCC-2001-270083
Advisory Published
Vulnetix · Advisory published July 2, 2001
Web Servers that use the IBM VisualAge Professional Vesion 3.5 Java Servlet Container are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or script(JavaScript, VBScript, Java, etc.) in a dynamically generated page based on unvalidated input from untrustworthy sources. This can be a problem when a web server does not adequately ensure that generated pages are properly encoded to prevent unintended execution of scripts, and when input is not validated to prevent malicious HTML from being presented to the user.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact15population15exploitation0widely_known20score_current59.0625ease_of_exploitation20

Aliases

CVE-2001-0824

References

IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
url
IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
url
IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›