Lucene search

[email protected]CVE-2008-0869

HistoryFeb 21, 2008 - 1:44 a.m.

CVE-2008-0869

2008-02-2101:44:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-0869

cross-site scripting

xss vulnerability

bea weblogic workshop

apache beehive netui framework

page flows

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a “framework defined request parameter” when using WebLogic Workshop or Apache Beehive NetUI framework with page flows.

Affected configurations

NVD

Node

beaweblogic_serverMatch9.0

beaweblogic_serverMatch9.1

beaweblogic_serverMatch9.2

beaweblogic_workshopMatch8.1sp2

beaweblogic_workshopMatch8.1sp3

beaweblogic_workshopMatch8.1sp4

beaweblogic_workshopMatch8.1sp5

beaweblogic_workshopMatch8.1sp6

bea_systemsweblogicMatch10.0

CPENameOperatorVersion
bea:weblogic_serverbea weblogic servereq9.0
bea:weblogic_serverbea weblogic servereq9.1
bea:weblogic_serverbea weblogic servereq9.2
bea:weblogic_workshopbea weblogic workshopeq8.1
bea_systems:weblogicbea systems weblogiceq10.0

CPE	Name	Operator	Version
bea:weblogic_server	bea weblogic server	eq	9.0
bea:weblogic_server	bea weblogic server	eq	9.1
bea:weblogic_server	bea weblogic server	eq	9.2
bea:weblogic_workshop	bea weblogic workshop	eq	8.1
bea_systems:weblogic	bea systems weblogic	eq	10.0

References

dev2dev.bea.com/pub/advisory/263

secunia.com/advisories/29041

www.securitytracker.com/id?1019438

www.vupen.com/english/advisories/2008/0611

www.vupen.com/english/advisories/2008/0612/references

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Related for CVE-2008-0869

cvelist1 nvd1 prion1