CVE Details for CVE: CVE-2005-0873
Summary
Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter.
| Timestamps | |
|---|---|
| Last major update | 18-10-2016 - 03:15 |
| Published | 02-05-2005 - 04:00 |
| Last modified | 18-10-2016 - 03:15 |
References
- http://www.securityfocus.com/bid/12892
- http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html
- http://www.us-cert.gov/cas/techalerts/TA05-292A.html
- http://www.kb.cert.org/vuls/id/210524
- http://www.securityfocus.com/bid/15134
- http://secunia.com/advisories/17250
- http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
- http://marc.info/?l=bugtraq&m=111168323804203&w=2
CWE
CVSS
Base
4.3
Impact
2.9
Exploitability
8.6
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | MEDIUM | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| NONE | PARTIAL | NONE |
CVSS3
None