Lucene search
HistoryDec 23, 2006 - 1:28 a.m.
CVE-2006-6703
cve-2006-6703
oracle
portal
xss
vulnerabilities
remote attackers
javascript
webapp
jsp
6.1 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.11 Low
EPSS
Percentile
95.1%
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:oracle9i | oracle oracle9i | eq | * |
| oracle:oracle10g | oracle oracle10g | eq | * |
6.1 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.11 Low
EPSS
Percentile
95.1%
Related for CVE-2006-6703