Unscored CVE-2007-1609 EUVD-2007-1603GHSA-gmx4-93pr-r35c

Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.…

Published Mar 22, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563.

References

2474 third-party-advisory
20080905 Re: Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy mailing-list
33521 vdb-entry
ADV-2007-1078 vdb-entry
24554 third-party-advisory
oracle-dynamicmonitoring-xss(33146) vdb-entry
23102 vdb-entry
20070320 Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy mailing-list