Lucene search
HistoryFeb 21, 2008 - 1:44 a.m.
CVE-2008-0869
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.005
Percentile
75.7%
Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a “framework defined request parameter” when using WebLogic Workshop or Apache Beehive NetUI framework with page flows.
Affected configurations
Node
beaweblogic_serverMatch9.0
ORbeaweblogic_serverMatch9.1
ORbeaweblogic_serverMatch9.2
ORbeaweblogic_workshopMatch8.1sp2
ORbeaweblogic_workshopMatch8.1sp3
ORbeaweblogic_workshopMatch8.1sp4
ORbeaweblogic_workshopMatch8.1sp5
ORbeaweblogic_workshopMatch8.1sp6
ORbea_systemsweblogicMatch10.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bea | weblogic_server | 9.0 | cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:* |
| bea | weblogic_server | 9.1 | cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:* |
| bea | weblogic_server | 9.2 | cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:* |
| bea | weblogic_workshop | 8.1 | cpe:2.3:a:bea:weblogic_workshop:8.1:sp2:*:*:*:*:*:* |
| bea | weblogic_workshop | 8.1 | cpe:2.3:a:bea:weblogic_workshop:8.1:sp3:*:*:*:*:*:* |
| bea | weblogic_workshop | 8.1 | cpe:2.3:a:bea:weblogic_workshop:8.1:sp4:*:*:*:*:*:* |
| bea | weblogic_workshop | 8.1 | cpe:2.3:a:bea:weblogic_workshop:8.1:sp5:*:*:*:*:*:* |
| bea | weblogic_workshop | 8.1 | cpe:2.3:a:bea:weblogic_workshop:8.1:sp6:*:*:*:*:*:* |
| bea_systems | weblogic | 10.0 | cpe:2.3:a:bea_systems:weblogic:10.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-0869
2008-02-21 01:00:00
cve
cve
CVE-2008-0869
2008-02-21 01:44:00
prion
prion
Cross site scripting
2008-02-21 01:44:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.005
Percentile
75.7%
Related for NVD:CVE-2008-0869