PT-2004-3011

CVE-2004-2115

·

Published

2004-12-31

·

Updated

2017-07-11

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Oracle HTTP Server version 1.3.22
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary scripts as other users. The exploitation is possible via the action, username, or password parameters in an isqlplus request.
Recommendations For Oracle HTTP Server version 1.3.22, update to a version that includes the fix for this issue to prevent exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2004-2115
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com