Back to Database
Status published
High
CVE-2001-1202
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not...
Vulnerability Description
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-1202
Credits & Attribution
No credits recorded in the NVD database.
References
More from delegate
View All →CVE-2006-2072
Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x...
Medium
5
CVE-2005-0861
Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers...
High
7.5
CVE-2005-0036
The DNS implementation in DeleGate 8.10.2 and earlier allows remote...
Medium
5
CVE-2004-2003
Buffer overflow in the ssl_prcert function in the SSLway filter...
High
7.5
CVE-2004-0789
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1...
Medium
5
Affected Vendor
delegate
View all reports →Affected Software
delegate
Vulnerable Versions:
7.7.0, 7.7.1, 7.8.0, 7.8.1
Timeline
Official Publish:
March 15th, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.