CVE-2003-0733
Summary
| CVE | CVE-2003-0733 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2003-10-20 04:00:00 UTC |
| Updated | 2008-09-05 20:35:00 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bea | Liquid Data | 1.1 | All | All | All |
| Application | Bea | Liquid Data | 1.1 | All | All | All |
| Application | Bea | Weblogic Integration | 2.0 | All | All | All |
| Application | Bea | Weblogic Integration | 7.0 | All | All | All |
| Application | Bea | Weblogic Integration | 2.0 | All | All | All |
| Application | Bea | Weblogic Integration | 7.0 | All | All | All |
| Application | Bea | Weblogic Server | 5.1 | All | All | All |
| Application | Bea | Weblogic Server | 7.0 | All | express | All |
| Application | Bea | Weblogic Server | 5.1 | All | All | All |
| Application | Bea | Weblogic Server | 7.0 | All | express | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Bea WebLogic/Liquid Data Multiple Cross-Site Scripting Vulnerabilities | BID | www.securityfocus.com | Patch, Vendor Advisory |
| Advisories & Notifications | CONFIRM | dev2dev.bea.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.