Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-0624 — Cross-site Scripting in Weblogic Server

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
3.5%
top 12.46%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
BEA Weblogic Server
Timeline
PublishedDec 1
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: dev2dev.bea.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p679-7455-8j5x: Cross-site scripting (XSS) vulnerability in InteractiveQuery↗2022-04-29
▶
CVEList
CVE-2003-0624: Cross-site scripting (XSS) vulnerability in InteractiveQuery↗2003-11-05
▶

💥Exploits & PoCs

1
Exploit-DB
BEA WebLogic 6/7/8 - InteractiveQuery.jsp Cross-Site Scripting↗2003-10-31
▶
CVE-2003-0624 — Cross-site Scripting in Weblogic Server | cvebase