Vulnerability Database

299,455

Total vulnerabilities in the database

CVE-2002-1640

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.

  • Published: Apr 1, 2002
  • Updated: Apr 13, 2023
  • CVE: CVE-2002-1640
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
oracle / configurator 11i 11i.x
oracle / configurator 11.5.6.0.0 11.5.6.16.52.x
oracle / configurator 11.5.7.0.0 11.5.7.17.31.x