GCVE-110-CERTCC-2004-197318

Advisory Published

Vulnetix · Advisory published January 26, 2004

IBM Net.Data fails to properly validate user input passed to the db2www CGI interpreter, which could allow an attacker to mount a cross-site scripting attack against a vulnerable system.

Download JSON Open in Console

Risk Scores

certcc-cam

impact7population15exploitation0widely_known15score_current1.575ease_of_exploitation2

References

IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames

advisory

IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames

url

IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames

url

IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames

url

IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames

url

IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames

advisory

Browse GCVE Records

73,196 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON