Vulnerability Details CVE-2001-0948
Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.024
EPSS Ranking 84.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=100749428517090&w=2
- http://www.securityfocus.com/bid/3619
- http://www.valicert.com/support/security_advisory_eva.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7650
- http://marc.info/?l=bugtraq&m=100749428517090&w=2
- http://www.securityfocus.com/bid/3619
- http://www.valicert.com/support/security_advisory_eva.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7650
Products affected by CVE-2001-0948
-
cpe:2.3:a:valicert:enterprise_validation_authority:3.3
-
cpe:2.3:a:valicert:enterprise_validation_authority:3.4
-
cpe:2.3:a:valicert:enterprise_validation_authority:3.5
-
cpe:2.3:a:valicert:enterprise_validation_authority:3.6
-
cpe:2.3:a:valicert:enterprise_validation_authority:3.7
-
cpe:2.3:a:valicert:enterprise_validation_authority:3.8
-
cpe:2.3:a:valicert:enterprise_validation_authority:3.9
-
cpe:2.3:a:valicert:enterprise_validation_authority:4.0
-
cpe:2.3:a:valicert:enterprise_validation_authority:4.1
-
cpe:2.3:a:valicert:enterprise_validation_authority:4.2
-
cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1