Lucene search

[email protected]CVE-2002-2347

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2347

2022-10-0316:23:49

CWE-79

[email protected]

web.nvd.nist.gov

oracle

java

xss

vulnerability

ojsp

demo files

remote attackers

web script

html

injection

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field.

Affected configurations

NVD

Node

oracleapplication_serverMatch1.0.2

oracleapplication_serverMatch1.0.2.1s

oracleapplication_serverMatch1.0.2.2

oracleapplication_serverMatch9.0.2

CPENameOperatorVersion
oracle:application_serveroracle application servereq1.0.2
oracle:application_serveroracle application servereq1.0.2.1s
oracle:application_serveroracle application servereq1.0.2.2
oracle:application_serveroracle application servereq9.0.2

CPE	Name	Operator	Version
oracle:application_server	oracle application server	eq	1.0.2
oracle:application_server	oracle application server	eq	1.0.2.1s
oracle:application_server	oracle application server	eq	1.0.2.2
oracle:application_server	oracle application server	eq	9.0.2

References

otn.oracle.com/deploy/security/pdf/2002alert41rev1.pdf

www.iss.net/security_center/static/9842.php

www.securityfocus.com/bid/5452

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Related for CVE-2002-2347

nvd1 cvelist1 nessus1