NVD

Id
80593  
Name
CVE-2002-1640  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2002-04-01  
Modified Date
2017-07-10  
Seq
2002-1640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
401739 80593 CVE-2002-1640 1003967  View
401740 80593 CVE-2002-1640 http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html  View
401741 80593 CVE-2002-1640 4430  View
401742 80593 CVE-2002-1640 4436  View
401743 80593 CVE-2002-1640 oracle-configurator-dhtml-css(8780)  View
401744 80593 CVE-2002-1640 oracle-configurator-uiservlet-css(8781)  View

Related JVN