Info

Disclosure

Oct 10, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

BEA WebLogic contains multiple unspecified flaws that allows a remote cross site scripting attack. No further details have been provided.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Upgrade to version 8.1 Service Pack 5 or higher, as it has been reported to fix this vulnerability. In addition, BEA Systems has released a patch for version 9.0, 7.0 Service Pack 6 and 6.1 Service Pack 7.

Products

BEA Systems, Inc.	BEA WebLogic Server/Express	8.1 Service Pack 4
		7.0 Service Pack 6
		9.0
		6.1 Service Pack 7

References

Security Tracker: 1015029
Bugtraq ID: 15052
Secunia Advisory ID: 17138
CVE ID: 2005-4751 (see also: NVD)
Keyword: BEA05-80.02
Vendor Specific Advisory URL: http://dev2dev.bea.com/pub/advisory/139
Vendor URL: http://www.bea.com/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36218

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

BEA Systems, Inc.

BEA WebLogic Server/Express

References

Credit