Lucene search

[email protected]CVE-2008-0867

HistoryFeb 21, 2008 - 1:44 a.m.

CVE-2008-0867

2008-02-2101:44:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2008

0867

cross-site scripting

xss

vulnerability

bea aqualogic interaction

web script

html

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

Affected configurations

NVD

Node

bea_systemsaqualogic_interactionMatch6.1

bea_systemsaqualogic_interactionMatch6.1mp1

bea_systemsplumtree_foundationMatch6.0

bea_systemsplumtree_foundationMatch6.0sp1

CPENameOperatorVersion
bea_systems:aqualogic_interactionbea systems aqualogic interactioneq6.1
bea_systems:plumtree_foundationbea systems plumtree foundationeq6.0

CPE	Name	Operator	Version
bea_systems:aqualogic_interaction	bea systems aqualogic interaction	eq	6.1
bea_systems:plumtree_foundation	bea systems plumtree foundation	eq	6.0

References

dev2dev.bea.com/pub/advisory/259

secunia.com/advisories/29040

www.procheckup.com/Vulnerability_PR06-12.php

www.securityfocus.com/archive/1/488346/100/100/threaded

www.securitytracker.com/id?1019440

www.vupen.com/english/advisories/2008/0610

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

Related for CVE-2008-0867

prion1 cvelist1 nvd1