CVE-2005-2379 — Cross-site Scripting in Oracle Reports

3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 29.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Reports
Timeline
PublishedJul 26
Latest updateMay 1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) debug parameter to showenv, (2) test parameter to parsequery, or (3) delimiter or (4) CELLWRAPPER parameter to rwservlet.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/reports9.0.2

🔴Vulnerability Details

2
GHSA
GHSA-gx9h-fjh8-85fx: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9↗2022-05-01
▶
CVEList
CVE-2005-2379: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9↗2005-07-26
▶