CVEvulnerability
CVE-2005-3204
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
Affected configurations
• oracle application server 9.0.2
• oracle application server 9.0.2.0.0
• oracle application server 9.0.2.0.1
• oracle application server 9.0.2.1
• oracle application server 9.0.2.2
• oracle application server 9.0.2.3
• oracle application server 9.0.3
• oracle application server 9.0.3.1
• oracle application server 9.2.0.6
• oracle oracle9i client 9.2.0.1
• oracle oracle9i client 9.2.0.2
• oracle oracle9i developer 9.0.4
• oracle oracle9i enterprise 9.0.1
• oracle oracle9i enterprise 9.0.1.4
• oracle oracle9i enterprise 9.0.1.5
• oracle oracle9i enterprise 9.0.1.5 fips
• oracle oracle9i enterprise 9.0.4
• oracle oracle9i enterprise 9.2.0
• oracle oracle9i enterprise 9.2.0.1
• oracle oracle9i enterprise 9.2.0.2
• oracle oracle9i enterprise 9.2.0.3
• oracle oracle9i enterprise 9.2.0.4
• oracle oracle9i enterprise 9.2.0.5
• oracle oracle9i enterprise 9.2.0.6
• oracle oracle9i personal 9.0.1
• oracle oracle9i personal 9.0.1.4
• oracle oracle9i personal 9.0.1.5
• oracle oracle9i personal 9.0.1.5 fips
• oracle oracle9i personal 9.0.4
• oracle oracle9i personal 9.2
• oracle oracle9i personal 9.2.0.1
• oracle oracle9i personal 9.2.0.2
• oracle oracle9i personal 9.2.0.3
• oracle oracle9i personal 9.2.0.4
• oracle oracle9i personal 9.2.0.5
• oracle oracle9i personal 9.2.0.6
• oracle oracle9i standard 9.0
• oracle oracle9i standard 9.0.1
• oracle oracle9i standard 9.0.1.2
• oracle oracle9i standard 9.0.1.3
• oracle oracle9i standard 9.0.1.4
• oracle oracle9i standard 9.0.1.5
• oracle oracle9i standard 9.0.1.5 fips
• oracle oracle9i standard 9.0.2
• oracle oracle9i standard 9.0.4
• oracle oracle9i standard 9.2
• oracle oracle9i standard 9.2.0.1
• oracle oracle9i standard 9.2.0.2
• oracle oracle9i standard 9.2.0.3
• oracle oracle9i standard 9.2.0.4
• oracle oracle9i standard 9.2.0.5
• oracle oracle9i standard 9.2.0.6
• oracle oracle9i standard 9.2.3
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html Vendor Advisory
- http://marc.info/?l=bugtraq&m=112870541502542&w=2 marc.info
- http://secunia.com/advisories/15991/ Patch, Vendor Advisory
- http://securityreason.com/securityalert/66 securityreason.com
- http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html Vendor Advisory
- http://www.osvdb.org/20054 www.osvdb.org
- http://www.red-database-security.com/advisory/oracle_xmldb_css.html Vendor Advisory
- http://www.securityfocus.com/bid/15034 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22541 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html Vendor Advisory
- http://marc.info/?l=bugtraq&m=112870541502542&w=2 marc.info
- http://secunia.com/advisories/15991/ Patch, Vendor Advisory
- http://securityreason.com/securityalert/66 securityreason.com
- http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html Vendor Advisory
- http://www.osvdb.org/20054 www.osvdb.org
- http://www.red-database-security.com/advisory/oracle_xmldb_css.html Vendor Advisory
- http://www.securityfocus.com/bid/15034 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22541 exchange.xforce.ibmcloud.com