CVE-2003-0733: XSS

Published Sep 4, 2003

Updated

Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.

Affected Software

5 affected components

Bea Liquid Data=1.1

Bea WebLogic Integration=2.0

Bea WebLogic Integration=7.0

Bea WebLogic Server=5.1

Bea WebLogic Server=7.0

Remediation

Patch Available

http://www.securityfocus.com/bid/8357

Event History

Sep 4, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Oct 20, 2003

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0733?

CVE-2003-0733 has been classified as a moderate severity vulnerability due to the potential for unauthorized access and data theft.

How do I fix CVE-2003-0733?

To fix CVE-2003-0733, it is recommended to update to the latest patched version of the affected software like BEA Liquid Data 1.1 or BEA WebLogic Integration 7.0.

What systems are affected by CVE-2003-0733?

CVE-2003-0733 affects BEA Liquid Data 1.1, BEA WebLogic Integration 2.0 and 7.0, as well as Oracle WebLogic Server versions 5.1 and 7.0.

What kind of attack is possible with CVE-2003-0733?

CVE-2003-0733 allows remote attackers to execute arbitrary web scripts through multiple cross-site scripting vulnerabilities.

Is CVE-2003-0733 still a relevant vulnerability?

Yes, CVE-2003-0733 remains relevant for organizations using outdated versions of the affected WebLogic products, emphasizing the need for regular software updates.