PT-2004-3011
CVE-2004-2115
·
تاريخ النشر
2004-12-31
·
تاريخ التحديث
2017-07-11
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Oracle HTTP Server version 1.3.22
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary scripts as other users. The exploitation is possible via the
action, username, or password parameters in an isqlplus request.Recommendations
For Oracle HTTP Server version 1.3.22, update to a version that includes the fix for this issue to prevent exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾