ByteOS Network

NVD Vulnerability Details :

CVE-2001-1084

Deferred

Source-cve@mitre.org

Published At-02 Jul, 2001 | 04:00

Updated At-03 Apr, 2025 | 01:03

Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Macromedia, Inc.

>>jrun>>2.3.3

cpe:2.3:a:macromedia:jrun:2.3.3:*:*:*:*:*:*:*

Macromedia, Inc.

>>jrun>>3.0

cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html	cve@mitre.org	N/A
http://www.kb.cert.org/vuls/id/654643	cve@mitre.org	US Government Resource
http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full	cve@mitre.org	N/A
http://www.osvdb.org/1891	cve@mitre.org	N/A
http://www.securityfocus.com/bid/2983	cve@mitre.org	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793	cve@mitre.org	N/A
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/654643	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/1891	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/2983	af854a3a-2127-422b-91ae-364da2661108	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History