CVE-2006-6703

CVE-2006-6703 describes multiple XSS vulnerabilities in Oracle Portal 9i and 10g. The issues allow remote attackers to inject arbitrary JavaScript, e.g., via the tc parameter in webapp/jsp/container_tabs.jsp, with other vectors not detailed here. The NVD metrics indicate a Network attack vector, ...