Cross site scripting

2008-02-2101:44:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a “framework defined request parameter” when using WebLogic Workshop or Apache Beehive NetUI framework with page flows.

CPENameOperatorVersion
weblogic_servereq9.0
weblogic_servereq9.2
weblogic_servereq9.1
weblogic_workshopeq8.1 sp2
weblogic_workshopeq8.1 sp6
weblogic_workshopeq8.1 sp4
weblogic_workshopeq8.1 sp5
weblogic_workshopeq8.1 sp3
weblogiceq10.0

Name	Operator	Version
weblogic_server	eq	9.0
weblogic_server	eq	9.2
weblogic_server	eq	9.1
weblogic_workshop	eq	8.1 sp2
weblogic_workshop	eq	8.1 sp6
weblogic_workshop	eq	8.1 sp4
weblogic_workshop	eq	8.1 sp5
weblogic_workshop	eq	8.1 sp3
weblogic	eq	10.0