CVEvulnerability

CVE-2001-0948

7.5 HIGH Published 2001-12-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-12-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.

Affected configurations

• valicert enterprise validation authority 3.3 • valicert enterprise validation authority 3.4 • valicert enterprise validation authority 3.5 • valicert enterprise validation authority 3.6 • valicert enterprise validation authority 3.7 • valicert enterprise validation authority 3.8 • valicert enterprise validation authority 3.9 • valicert enterprise validation authority 4.0 • valicert enterprise validation authority 4.1 • valicert enterprise validation authority 4.2 • valicert enterprise validation authority 4.2.1

References