VULNERABILITY INTELLIGENCE

CVE-2001-1416

CVSS score5.1 MEDIUM
EPSS probability1.60%
CISA KEVNot currently listed
Published2001-01-18
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) BINARY tags.

Primary references