Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2008-0869

Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with page flows.

  • Published: Feb 21, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-0869
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
bea / weblogic_server 9.0 9.0.x
bea / weblogic_server 9.2 9.2.x
bea / weblogic_workshop 8.1-sp2 8.1-sp2.x
bea / weblogic_workshop 8.1-sp6 8.1-sp6.x
bea / weblogic_server 9.1 9.1.x
bea / weblogic_workshop 8.1-sp4 8.1-sp4.x
bea / weblogic_workshop 8.1-sp5 8.1-sp5.x
bea_systems / weblogic 10.0 10.0.x
bea / weblogic_workshop 8.1-sp3 8.1-sp3.x