NVD

Id
70138  
Name
CVE-2005-4549  
Description
Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the (1) RowKeyValue parameter in the PORTAL schema; and the (2) title and (3) content input fields when creating an forum article.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-12-28  
Modified Date
2016-10-17  
Seq
2005-4549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
361916 70138 CVE-2005-4549 20051223 SEC Consult SA-20051223-0 :: Multiple Cross Site Scripting Vulnerabilities in OracleAS Discussion Forum Portlet  View
361917 70138 CVE-2005-4549 298  View
361918 70138 CVE-2005-4549 1015405  View
361919 70138 CVE-2005-4549 16048  View
361920 70138 CVE-2005-4549 ADV-2005-3085  View

Related JVN