4.3

CVE-2005-3204

Exploit

Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Application Server Version9.0.2
Oracle ≫ Application Server Version9.0.2.0.0
Oracle ≫ Application Server Version9.0.2.0.1
Oracle ≫ Application Server Version9.0.2.1
Oracle ≫ Application Server Version9.0.2.2
Oracle ≫ Application Server Version9.0.2.3
Oracle ≫ Application Server Version9.0.3
Oracle ≫ Application Server Version9.0.3.1
Oracle ≫ Application Server Version9.2.0.6
Oracle ≫ Oracle9i Versionclient_9.2.0.1
Oracle ≫ Oracle9i Versionclient_9.2.0.2
Oracle ≫ Oracle9i Versiondeveloper_9.0.4
Oracle ≫ Oracle9i Versionenterprise_9.0.1
Oracle ≫ Oracle9i Versionenterprise_9.0.1.4
Oracle ≫ Oracle9i Versionenterprise_9.0.1.5
Oracle ≫ Oracle9i Versionenterprise_9.0.1.5_fips
Oracle ≫ Oracle9i Versionenterprise_9.0.4
Oracle ≫ Oracle9i Versionenterprise_9.2.0
Oracle ≫ Oracle9i Versionenterprise_9.2.0.1
Oracle ≫ Oracle9i Versionenterprise_9.2.0.2
Oracle ≫ Oracle9i Versionenterprise_9.2.0.3
Oracle ≫ Oracle9i Versionenterprise_9.2.0.4
Oracle ≫ Oracle9i Versionenterprise_9.2.0.5
Oracle ≫ Oracle9i Versionenterprise_9.2.0.6
Oracle ≫ Oracle9i Versionpersonal_9.0.1
Oracle ≫ Oracle9i Versionpersonal_9.0.1.4
Oracle ≫ Oracle9i Versionpersonal_9.0.1.5
Oracle ≫ Oracle9i Versionpersonal_9.0.1.5_fips
Oracle ≫ Oracle9i Versionpersonal_9.0.4
Oracle ≫ Oracle9i Versionpersonal_9.2
Oracle ≫ Oracle9i Versionpersonal_9.2.0.1
Oracle ≫ Oracle9i Versionpersonal_9.2.0.2
Oracle ≫ Oracle9i Versionpersonal_9.2.0.3
Oracle ≫ Oracle9i Versionpersonal_9.2.0.4
Oracle ≫ Oracle9i Versionpersonal_9.2.0.5
Oracle ≫ Oracle9i Versionpersonal_9.2.0.6
Oracle ≫ Oracle9i Versionstandard_9.0
Oracle ≫ Oracle9i Versionstandard_9.0.1
Oracle ≫ Oracle9i Versionstandard_9.0.1.2
Oracle ≫ Oracle9i Versionstandard_9.0.1.3
Oracle ≫ Oracle9i Versionstandard_9.0.1.4
Oracle ≫ Oracle9i Versionstandard_9.0.1.5
Oracle ≫ Oracle9i Versionstandard_9.0.1.5_fips
Oracle ≫ Oracle9i Versionstandard_9.0.2
Oracle ≫ Oracle9i Versionstandard_9.0.4
Oracle ≫ Oracle9i Versionstandard_9.2
Oracle ≫ Oracle9i Versionstandard_9.2.0.1
Oracle ≫ Oracle9i Versionstandard_9.2.0.2
Oracle ≫ Oracle9i Versionstandard_9.2.0.3
Oracle ≫ Oracle9i Versionstandard_9.2.0.4
Oracle ≫ Oracle9i Versionstandard_9.2.0.5
Oracle ≫ Oracle9i Versionstandard_9.2.0.6
Oracle ≫ Oracle9i Versionstandard_9.2.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 37.89% 0.969
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N