Unscored CVE-2008-0899 EUVD-2008-0906GHSA-23fq-26rx-3gc4

Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote at…

Published Feb 22, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page.

References

1019448 vdb-entry
29041 third-party-advisory
ADV-2008-0612 vdb-entry
BEA08-195.00 vendor-advisory