Back
CVE-2001-1441
Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message.
Published: Jul 2, 2001
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| ibm | visualage_for_java | 3.5 |
GitHub Security Advisory GHSA-76h9-8f7f-rp9m
Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote...
References (6)
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
- http://www.kb.cert.org/vuls/id/270083 Exploit, US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
- http://www.kb.cert.org/vuls/id/270083 Exploit, US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
2.69%
Top 16% most likely to be exploited
Threat Score
28 / 100
Data Sources
NVD
EPSS
GitHub