CVE-2003-5003

MEDIUM

ISS BlackICE PC Protection - Cross-Site Scripting in Update Handler

Title source: llm
STIX 2.1

Description

A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References (1)

Core 1
Core References
Permissions Required, VDB Entry x_refsource_misc
https://vuldb.com/?id.296

Scores

CVSS v3 5.0
EPSS 0.0048
EPSS Percentile 37.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Details

CWE
CWE-80 CWE-79
Status published
Products (1)
ibm/iss_blackice_pc_protection
Published Mar 28, 2022
Tracked Since Feb 18, 2026