Lucene search

K
jvnJapan Vulnerability NotesJVN:78305073
HistoryJun 05, 2012 - 12:00 a.m.

JVN#78305073: @WEB ShoppingCart vulnerable to cross-site scripting

2012-06-0500:00:00
Japan Vulnerability Notes
jvn.jp
11

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%

@WEB ShoppingCart provided by WEBLOGIC CORPORATION. is a system for creating shopping websites. @WEB ShoppingCart contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Apply a patch
Apply the appropriate patch according to the information provided by the developer.

Products Affected

  • @WEB ShoppingCart 1.5.1.0 and earlier
  • @WEB ShoppingCart T 1.5.0.1 and earlier

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%

Related for JVN:78305073