VulnerabilityModified
CVE-2005-0873
Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter.
MEDIUM 4.3EPSS 11.0%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 11.03% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- oracle/10g reports server
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=111168323804203&w=2
- http://secunia.com/advisories/17250
- http://www.kb.cert.org/vuls/id/210524US Government Resource
- http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
- http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html
- http://www.securityfocus.com/bid/12892Exploit
- http://www.securityfocus.com/bid/15134
- http://www.us-cert.gov/cas/techalerts/TA05-292A.htmlUS Government Resource
- http://marc.info/?l=bugtraq&m=111168323804203&w=2
- http://secunia.com/advisories/17250
- http://www.kb.cert.org/vuls/id/210524US Government Resource
- http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
- http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html
- http://www.securityfocus.com/bid/12892Exploit
- http://www.securityfocus.com/bid/15134
- http://www.us-cert.gov/cas/techalerts/TA05-292A.htmlUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.