VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 6, 2001· Updated Jun 16, 2026

CVE-2001-0824

CVE-2001-0824

Description

Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • IBM/Websphere Application Server2 versions
    cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_application_server:3.5:*:*:*:*:*:*:*
  • IBM/Webspherellm-fuzzy
    Range: = 3.02, 3.5 FP2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.