CVEvulnerability
CVE-2004-2435
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1) debugging or (2) utility scripts.
Affected configurations
• peoplesoft hrms 7.0
References
- http://secunia.com/advisories/12674/ Vendor Advisory
- http://www.auscert.org.au/render.html?it=4419 Vendor Advisory
- http://www.securityfocus.com/bid/11275 www.securityfocus.com
- http://www.securitytracker.com/alerts/2004/Sep/1011433.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17543 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/12674/ Vendor Advisory
- http://www.auscert.org.au/render.html?it=4419 Vendor Advisory
- http://www.securityfocus.com/bid/11275 www.securityfocus.com
- http://www.securitytracker.com/alerts/2004/Sep/1011433.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17543 exchange.xforce.ibmcloud.com