CVE-2005-1381

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-1381
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://marc.info/?l=bugtraq&m=111472423409560&w=2
http://secunia.com/advisories/15143 Vendor Advisory
http://www.osvdb.org/15910 Vendor Advisory
http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html Exploit Vendor Advisory
http://www.securityfocus.com/bid/13421 Exploit Vendor Advisory
http://www.securityfocus.com/bid/13422 Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20309
http://marc.info/?l=bugtraq&m=111472423409560&w=2
http://secunia.com/advisories/15143 Vendor Advisory
http://www.osvdb.org/15910 Vendor Advisory
http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html Exploit Vendor Advisory
http://www.securityfocus.com/bid/13421 Exploit Vendor Advisory
http://www.securityfocus.com/bid/13422 Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20309
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:application_server_web_cache:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:57

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=111472423409560&w=2 - () http://marc.info/?l=bugtraq&m=111472423409560&w=2 -
References () http://secunia.com/advisories/15143 - Vendor Advisory () http://secunia.com/advisories/15143 - Vendor Advisory
References () http://www.osvdb.org/15910 - Vendor Advisory () http://www.osvdb.org/15910 - Vendor Advisory
References () http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html - Exploit, Vendor Advisory () http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html - Exploit, Vendor Advisory
References () http://www.securityfocus.com/bid/13421 - Exploit, Vendor Advisory () http://www.securityfocus.com/bid/13421 - Exploit, Vendor Advisory
References () http://www.securityfocus.com/bid/13422 - Exploit, Vendor Advisory () http://www.securityfocus.com/bid/13422 - Exploit, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/20309 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/20309 -
Information

Published : 2005-05-03 04:00

Updated : 2024-11-20 23:57

NVD link : CVE-2005-1381

Mitre link : CVE-2005-1381

CVE.ORG link : CVE-2005-1381

JSON object : View

Products Affected

oracle

  • application_server_web_cache
CWE
NVD-CWE-Other