medium4.3
CVE-2008-0899
Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject ar…
Impact
Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea | Weblogic Server | Versions 9.0, 9.1, 9.2, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev2dev.bea.com/pub/advisory/269
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019448
- http://www.vupen.com/english/advisories/2008/0612/references
- http://dev2dev.bea.com/pub/advisory/269
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019448
- http://www.vupen.com/english/advisories/2008/0612/references