Icez

The issue is related to a reflected cross-site scripting vulnerability in the vCenter Server due to a lack of input sanitization. This allows an attacker to execute malicious scripts by tricking a victim into clicking a malicious link. The vulnerability can be exploited by a remote attacker to redirect users to a malicious webpage.

The issue is related to a vulnerability in the Oracle WebLogic Server product, specifically in the Console component. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle WebLogic Server, potentially resulting in a takeover. The vulnerability is easily exploitable and can impact the confidentiality, integrity, and availability of the server. It is associated with errors in code generation management and can be exploited using HTTP requests.

The issue exists due to insufficient validation of user-input data that is part of a message, allowing a remote attacker to execute arbitrary code. This can be achieved by passing a malicious field value in a raw message to the ActionMessage.