SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2005-3204

Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Reference:

BID-15034

SECUNIA-15991

http://marc.info/?l=bugtraq&m=112870541502542&w=2

OSVDB-20054

SREASON-66

http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html

http://www.red-database-security.com/advisory/oracle_xmldb_css.html

oracle-xmldb-xss(22541)


30479



423868



250108



909



196064



282