Unscored CVE-2007-2702 EUVD-2007-2694GHSA-47jj-pq3c-8pjm

Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to i…

Published May 16, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the rich text editor.

References

weblogic-portal-groupspace-xss(34283) vdb-entry
25284 third-party-advisory
36066 vdb-entry
BEA07-166.00 vendor-advisory
1018060 vdb-entry
ADV-2007-1815 vdb-entry