PT-2003-1753 · Bea · Bea Tuxedo

Martin Oneal

·

CVE-2003-0623

·

Publicado

2003-11-05

·

Atualizado

2017-07-11

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: BEA Tuxedo versions 8.1 and earlier
Description: A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script. This is achieved via the INIFILE argument.
Recommendations: For BEA Tuxedo versions 8.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2003-0623

Produtos afetados

Bea Tuxedo