Oracle JD Edwards EnterpriseOne Cross Site Scripting

Advisory Name: Multiple Cross-Site Scripting XSS in Oracle JD Edwards EnterpriseOne Public Advisory Id: CVE-2011-0836 Internal Cybsec Advisory Id: 2011-0402-Multiple XSSs in Oracle JD Edwards EnterpriseOne Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: 04/20/2011 Affected...

CVE-2011-0836

The vulnerability CVE-2011-0836 affects Oracle JD Edwards EnterpriseOne Tools 8.9 GA–8.98.4.1 and OneWorld Tools up to 24.1.3, with an unspecified issue related to Web Runtime SEC that allows remote authenticated users to affect integrity. The Red Hat CVE entry confirms the same affected products...