What is CVE-2003-5003?

CVE-2003-5003 is a medium-severity vulnerability in Ibm Iss Blackice Pc Protection, classified under Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS). CVSS score: 5.0/10. Published 2022-03-28.

How severe is CVE-2003-5003?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Is CVE-2003-5003 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Ibm Iss Blackice Pc Protection

CVE-2003-5003

A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

EPSS: 0.005 (39.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L.

Affected products

Ibm Iss_blackice_pc_protection
Iss Blackice Pc Protection — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

psirt@us.ibm.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2003-5003?: CVE-2003-5003 is a medium-severity vulnerability in Ibm Iss Blackice Pc Protection, classified under Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS). CVSS score: 5.0/10. Published 2022-03-28.
How severe is CVE-2003-5003?: Medium severity. CVSS v3 base score is 5.0 out of 10.
Is CVE-2003-5003 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.