PT-2005-4018 · Oracle · Oracle Xml Db

Alexander Kornbrust · Published 2005-10-14 · Updated 2017-07-11 · CVE-2005-3204

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle XML DB version 9iR2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request. This could potentially lead to unauthorized actions on the affected system.

Recommendations For Oracle XML DB version 9iR2, update to a version that includes a fix for this issue to prevent remote attackers from injecting malicious scripts.

Exploit

Fix

Related Identifiers

CVE-2005-3204

Affected Products

Oracle Xml Db

References · 12

• 🔥 http://securityfocus.com/bid/15034 · Exploit
• 🔥 https://exploit-db.com/exploits/26332 · Exploit
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html · Vendor Advisory
• http://oracle.com/technology/deploy/security/pdf/cpujul2005.html · Vendor Advisory
• http://secunia.com/advisories/15991 · Vendor Advisory
• http://red-database-security.com/advisory/oracle_xmldb_css.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3204 · Security Note
• http://osvdb.org/20054 · Note
• http://marc.info/?l=bugtraq&m=112870541502542&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3204 · Note
• http://securityreason.com/securityalert/66 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22541 · Note