6.8
CVSSv2

CVE-2009-1975

Published: 14/07/2009 Updated: 17/08/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote malicious users to affect confidentiality, integrity, and availability, related to the WLS Console Package.

Vulnerable Product Search on Vulmon Subscribe to Product

oracle bea product suite 10.3

Exploits

source: wwwsecurityfocuscom/bid/35673/info Oracle WebLogic Server is prone to a cross-site scripting vulnerability An attacker with 'WLS Console Package' privileges can exploit this issue The attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site Thi ...