Description

Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563.

Remediation

References

CVE-2007-1609

Related Vulnerabilities

MySQL CVE-2019-2536 Vulnerability (CVE-2019-2536)

Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-16877)

WordPress Plugin WordPress Simple Shopping Cart Cross-Site Scripting (4.6.1)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5730)

MySQL CVE-2012-1702 Vulnerability (CVE-2012-1702)

Severity

Medium

Classification

CVE-2007-1609

Tags

Missing Update Known Vulnerabilities