Description

The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.

Remediation

References

CVE-2004-1877

Related Vulnerabilities

WordPress Plugin The Plus Addons for Elementor Security Bypass (4.1.10)

WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.4)

Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22527)

WordPress Plugin BetterOptin Cross-Site Scripting (2.0.2)

WordPress Plugin Slack-Chat Information Disclosure (1.5.5)

Severity

Low

Classification

CVE-2004-1877

Tags

Missing Update Known Vulnerabilities