CVE-2001-1157

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-08-12 · updated 2026-06-16

Description

Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode.

Affected products

Baltimore Technologies Websweeper: 4.0, 4.02

References

http://www.securityfocus.com/archive/1/203821
http://www.securityfocus.com/bid/3172
http://www.securityfocus.com/bid/3173
http://www.securityfocus.com/archive/1/203821
http://www.securityfocus.com/bid/3172
http://www.securityfocus.com/bid/3173

Get alerted when CVE-2001-1157 or the next vulnerability affects your stack