CVE-2001-1441
VisualAge for Java 3.5 Professional - Cross-Site Scripting via URL Error Message
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message.
References (3)
Core 3
Core References
Exploit, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/270083
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
Various Sources mailing-list
x_refsource_bugtraq
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
Scores
EPSS
0.0269
EPSS Percentile
84.4%
Details
Status
published
Products (1)
ibm/visualage_for_java
3.5
Published
Jul 02, 2001
Tracked Since
Feb 18, 2026