CVE-2001-0948

Published: Dec 4, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.

Affected (11)

Products: Valicert: Enterprise Validation Authority

Valicert

1 product

Enterprise Validation Authority

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Valicert Enterprise Validation Authority	Version 3.3
Valicert Enterprise Validation Authority	Version 3.4
Valicert Enterprise Validation Authority	Version 3.5
Valicert Enterprise Validation Authority	Version 3.6
Valicert Enterprise Validation Authority	Version 3.7
Valicert Enterprise Validation Authority	Version 3.8
Valicert Enterprise Validation Authority	Version 3.9
Valicert Enterprise Validation Authority	Version 4.0
Valicert Enterprise Validation Authority	Version 4.1
Valicert Enterprise Validation Authority	Version 4.2.1
Valicert Enterprise Validation Authority	Version 4.2