CVEvulnerability
CVE-2008-0899
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page.
Affected configurations
• bea weblogic server 9.0
• bea weblogic server 9.1
• bea weblogic server 9.2
• bea weblogic server 10.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://dev2dev.bea.com/pub/advisory/269 Patch
- http://secunia.com/advisories/29041 secunia.com
- http://www.securitytracker.com/id?1019448 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0612/references www.vupen.com
- http://dev2dev.bea.com/pub/advisory/269 Patch
- http://secunia.com/advisories/29041 secunia.com
- http://www.securitytracker.com/id?1019448 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0612/references www.vupen.com