CVE-2002-1640 | BDVDB-2026-9090 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/8781
http://securitytracker.com/id?1003967
http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html
http://www.securityfocus.com/bid/4430
http://www.securityfocus.com/bid/4436
https://exchange.xforce.ibmcloud.com/vulnerabilities/8780

Exploit#

No public exploit known

History#

Version 12005-03-28Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.