CVE-2001-0824

IBM WebSphere Application Server 3.02 and 3.5 FP2 - Cross-Site Scripting via JSP Request or Example Error Page

Title source: llm
STIX 2.1

Description

Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.

References (2)

Core 2
Core References
Various Sources mailing-list x_refsource_bugtraq
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/2969

Scores

EPSS 0.0227
EPSS Percentile 81.3%

Details

Status published
Products (2)
ibm/websphere_application_server 3.0.2
ibm/websphere_application_server 3.5
Published Dec 06, 2001
Tracked Since Feb 18, 2026