CVE-2008-0899

Cross-site scripting XSS vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page...

CVE-2008-0899

Cross-site scripting XSS vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page...

CVE-2008-0899

CVE-2008-0899 describes a cross-site scripting (XSS) vulnerability in the Administration Console of BEA WebLogic Server and Express 9.0–10.0. The issue arises because URLs are not properly handled by the Unexpected Exception Page, allowing remote attackers to inject arbitrary web script or HTML. ...