CVE-2001-0520 - CVE House
Back to Database
Status published High CVE-2001-0520

Aladdin eSafe Gateway versions 3.0 and earlier allows a remote...

Vulnerability Description

Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-0520

Credits & Attribution

No credits recorded in the NVD database.

References

More from aladdin knowledge systems

View All →
CVE-2003-1449
Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the...
High 7.5
CVE-2001-0521
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote...
High 7.5
CVE-2001-0519
Aladdin eSafe Gateway versions 2.x allows a remote attacker to...
High 7.5
CVE-2000-0427
The Aladdin Knowledge Systems eToken device allows attackers with physical...
Medium 4.6

Affected Vendor

aladdin knowledge systems

View all reports →

Affected Software

esafe gateway
Vulnerable Versions:
3.0

Timeline

Official Publish: July 27th, 2001
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.