CVE-2007-1609: XSS

Published Mar 22, 2007

Updated

Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563.

Affected Software

1 affected component

Oracle Application Server=10.1.2.0.0

Event History

Mar 22, 2007

CVE Published

11:19 PM

Mar 23, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1609?

The severity of CVE-2007-1609 is considered moderate due to the potential for remote attackers to conduct Cross-site scripting attacks.

How do I fix CVE-2007-1609?

To fix CVE-2007-1609, upgrade to a patched version of Oracle Application Server that resolves the XSS vulnerability.

Who is affected by CVE-2007-1609?

CVE-2007-1609 affects users of Oracle Application Server version 10.1.2.0.0.

What types of attacks can be carried out using CVE-2007-1609?

CVE-2007-1609 can be exploited to perform Cross-site scripting attacks, allowing attackers to inject arbitrary scripts.

Is CVE-2007-1609 related to any other vulnerabilities?

Yes, CVE-2007-1609 may be related to CVE-2002-0563 due to similar underlying issues.