6.8
CVE-2006-6703
- EPSS 1.97%
- Veröffentlicht 23.12.2006 01:28:00
- Zuletzt bearbeitet 16.06.2026 22:33:37
- CVE-Watchlists
- Unerledigt
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.97% | 0.782 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://www.securityfocus.com/archive/1/455143/100/0/threaded
http://www.securityfocus.com/bid/21717
http://www.vupen.com/english/advisories/2006/5143