Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
| Software | From | Fixed in |
|---|---|---|
| bea_systems / plumtree_foundation | 6.0 | 6.0.x |
| bea_systems / plumtree_foundation | 6.0-sp1 | 6.0-sp1.x |
| bea_systems / aqualogic_interaction | 6.1-mp1 | 6.1-mp1.x |
| bea_systems / aqualogic_interaction | 6.1 | 6.1.x |