CVE-2003-0733

published 2003-10-20

CVE-2003-0733: Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0…

Priority P4 19 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
bea	liquid_data	—	—
bea	weblogic_integration	—	—
bea	weblogic_integration	—	—
bea	weblogic_server	—	—
bea	weblogic_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.