CVE

Id
32720  
CVE No.
CVE-2008-2603  
Status
Candidate  
Description
Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via the REFRESHCHOICE parameter in multiple web pages.  
Phase
Assigned (20080609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354061 32720 CVE-2008-2603 BUGTRAQ:20080804 Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter)  View
354062 32720 CVE-2008-2603 URL:http://www.securityfocus.com/archive/1/archive/1/495093/100/0/threaded  View
354063 32720 CVE-2008-2603 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html  View
354064 32720 CVE-2008-2603 HP:HPSBMA02133  View
354065 32720 CVE-2008-2603 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
354066 32720 CVE-2008-2603 HP:SSRT061201  View
354067 32720 CVE-2008-2603 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
354068 32720 CVE-2008-2603 VUPEN:ADV-2008-2115  View
354069 32720 CVE-2008-2603 URL:http://www.vupen.com/english/advisories/2008/2115  View
354070 32720 CVE-2008-2603 VUPEN:ADV-2008-2109  View
354071 32720 CVE-2008-2603 URL:http://www.vupen.com/english/advisories/2008/2109/references  View
354072 32720 CVE-2008-2603 SECTRACK:1020496  View
354073 32720 CVE-2008-2603 URL:http://www.securitytracker.com/id?1020496  View
354074 32720 CVE-2008-2603 SECTRACK:1020499  View
354075 32720 CVE-2008-2603 URL:http://www.securitytracker.com/id?1020499  View
354076 32720 CVE-2008-2603 SECUNIA:31113  View
354077 32720 CVE-2008-2603 URL:http://secunia.com/advisories/31113  View
354078 32720 CVE-2008-2603 SECUNIA:31087  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46238 JVNDB-2008-001548 Oracle Database の Advanced Queuing コンポーネントにおける脆弱性 Oracle Database の Advanced Queuing コンポーネントには、SYS.DBMS_AQELM に関連する詳細不明な脆弱性が存在します。 CVE-2008-2607 32720 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001548.html  View