CVE-2008-0866

EUVD-2008-0873
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
Affected Products (NVD)
VendorProductVersion
beaweblogic_workshop
8.1:sp2
beaweblogic_workshop
8.1:sp3
beaweblogic_workshop
8.1:sp4
beaweblogic_workshop
8.1:sp5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://dev2dev.bea.com/pub/advisory/258
http://secunia.com/advisories/29041
http://www.securitytracker.com/id?1019441
http://www.vupen.com/english/advisories/2008/0611
http://dev2dev.bea.com/pub/advisory/258
http://secunia.com/advisories/29041
http://www.securitytracker.com/id?1019441
http://www.vupen.com/english/advisories/2008/0611