CVE-2005-4751

2022-10-0316:22:44

mitre

www.cve.org

cross-site scripting

bea weblogic

remote attackers

administrative privileges

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9.0, 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allow remote attackers to inject arbitrary web script or HTML and gain administrative privileges via unknown attack vectors.

References

dev2dev.bea.com/pub/advisory/139

secunia.com/advisories/17138

www.securityfocus.com/bid/15052