CVE-2008-0899 | BDVDB-2026-29387 Detail

Description#

Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id?1019448
http://secunia.com/advisories/29041
http://www.vupen.com/english/advisories/2008/0612/references
http://dev2dev.bea.com/pub/advisory/269

Exploit#

No public exploit known

History#

Version 12008-02-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.