Lucene search

PRIOn knowledge basePRION:CVE-2007-2694

HistoryMay 16, 2007 - 1:19 a.m.

Cross site scripting

2007-05-1601:19:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
weblogic_servereq8.1 express
weblogic_servereq7.0 sp2-express
weblogic_servereq6.1 sp4
weblogic_servereq7.0 sp7
weblogic_servereq6.1 express
weblogic_servereq8.1
weblogic_servereq6.1 sp5
weblogic_servereq6.1 sp6
weblogic_servereq7.0 sp4
weblogic_servereq6.1 sp1-express

Name	Operator	Version
weblogic_server	eq	8.1 express
weblogic_server	eq	7.0 sp2-express
weblogic_server	eq	6.1 sp4
weblogic_server	eq	7.0 sp7
weblogic_server	eq	6.1 express
weblogic_server	eq	8.1
weblogic_server	eq	6.1 sp5
weblogic_server	eq	6.1 sp6
weblogic_server	eq	7.0 sp4
weblogic_server	eq	6.1 sp1-express

Rows per page:

1-10 of 481

References

dev2dev.bea.com/pub/advisory/232

osvdb.org/36075

secunia.com/advisories/25284

www.vupen.com/english/advisories/2007/1815

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.5%

JSON

Related for PRION:CVE-2007-2694