NVD

Id
837  
Name
CVE-2008-0866  
Description
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-02-20  
Modified Date
2011-03-07  
Seq
2008-0866  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
5089 837 CVE-2008-0866 BEA08-185.00  View
5090 837 CVE-2008-0866 1019441  View
5091 837 CVE-2008-0866 ADV-2008-0611  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47440 JVNDB-2008-002750 BEA WebLogic Workshop におけるクロスサイトスクリプティングの脆弱性 BEA WebLogic Workshop は、NetUI ページフローが無効なアクション URI を適切に処理しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0866 30979 CVE-2008-0866 837 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002750.html 2008-02-20 2012-06-26 View