Security Advisory

CVE-2006-6703

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-12-23 01:00:00
Last updated 2024-08-07 20:34:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.