Every CVE Search/ Get API key

CVE-2001-1532

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL...

5.0 Medium

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

Exploit likelihood

1.26%Up 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

Record
CVE-2001-1532
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

Record
CVE-2001-1532
Updated
2026-11-02
EUVDEUVD-2001-1509 No score

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

Record
EUVD-2001-1509
Updated
2026-11-03
GitHub AdvisoriesGHSA-88xw-p4fq-6x82 No score

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL...

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

Record
GHSA-88xw-p4fq-6x82
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1532 is a medium vulnerability (CVSS 5.0) in Web Crossing Webx, published December 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. No source names a fixed version.

References

MoveEnter Open