CVE-2003-0629

Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://marc.info/?l=bugtraq&m=106874146204158&w=2
http://marc.info/?l=bugtraq&m=106874146204158&w=2

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:peoplesoft:peopletools:8.4:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.10:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.11:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.12:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.13:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.14:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.15:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.16:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.17:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.18:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.19:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.20:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.40:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.41:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.42:::::::*
	cpe:2.3:a:peoplesoft:peopletools:8.43:::::::*

History

20 Nov 2024, 23:45

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=106874146204158&w=2 -~~	() http://marc.info/?l=bugtraq&m=106874146204158&w=2 -

Information

Published : 2003-12-15 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2003-0629

Mitre link : CVE-2003-0629

CVE.ORG link : CVE-2003-0629

JSON object : View

Products Affected

peoplesoft

peopletools

CWE

NVD-CWE-Other

{"id": "CVE-2003-0629", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-12-15T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=106874146204158&w=2", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=106874146204158&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el entorno PeopleSoft IScript de PeopleTools 8.43 y anteriores permite a atacantes remotos insertar script web arbitrario mediante ciertas peticiones HTTP a IScript."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70B618A8-48AF-4193-BCD8-7B0F24923860"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE31EA39-F6EE-4FC6-A64F-74E1364A84C3"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5611ED3-9504-469C-A33D-D6AB31971BE5"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "030FF50A-1D1D-4D7D-964E-2F2CA3980C27"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D113AFE-BEF6-4557-B814-073F56912667"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9ADCBDC1-C291-4978-95CC-2955AF9F0149"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "623DDE5E-20CF-4002-A532-E1B0171FF0C5"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55820FF1-2A48-4699-8C90-90CBC0C2D6A4"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAD1CF68-901D-4366-81F1-20E561BEB405"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B7B6AF6-2C2B-4186-911A-63D7CCE34E79"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A132448-0960-4878-9947-8F0B07C2E516"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15C45E32-CDEB-4AB2-B3BB-1F399F98E0B7"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "805FBA0A-0B52-4E61-A45C-E2C9AD48E555"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.41:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F94A7F77-D984-49BD-B59E-EBBC91C56C66"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.42:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD78CC13-C007-4AB1-912E-16B37D1D55CD"}, {"criteria": "cpe:2.3:a:peoplesoft:peopletools:8.43:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECCB21D3-4FCB-4F0E-8430-B587512D04ED"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}