CVE-2008-0899

Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
VendorProductVersion
beaweblogic_server
9.0
beaweblogic_server
9.1
beaweblogic_server
9.2
beaweblogic_server
9.2:mp1
beaweblogic_server
10.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://dev2dev.bea.com/pub/advisory/269
http://secunia.com/advisories/29041
http://www.securitytracker.com/id?1019448
http://www.vupen.com/english/advisories/2008/0612/references
http://dev2dev.bea.com/pub/advisory/269
http://secunia.com/advisories/29041
http://www.securitytracker.com/id?1019448
http://www.vupen.com/english/advisories/2008/0612/references