Lucene search
HistoryAug 20, 2005 - 4:00 a.m.
CVE-2004-2435
cve-2004-2435
cross-site scripting
xss
peoplesoft
hrms
web enabled
html access
remote attackers
web script
html
debugging
utility scripts
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.7%
Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when “web enabled” using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1) debugging or (2) utility scripts.
Affected configurations
Node
peoplesofthrmsMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| peoplesoft:hrms | peoplesoft hrms | eq | 7.0 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.7%
Related for CVE-2004-2435