Cross site scripting

2008-02-2101:44:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.1%

JSON

Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors.

CPENameOperatorVersion
weblogic_portaleq10.0
weblogic_portaleq9.2

CPE	Name	Operator	Version
	weblogic_portal	eq	10.0
	weblogic_portal	eq	9.2

References

dev2dev.bea.com/pub/advisory/261

secunia.com/advisories/29041

www.securitytracker.com/id?1019452

www.vupen.com/english/advisories/2008/0613