← Back

CVE-2003-0733

nvd nist
Published: Oct 20, 2003Modified: Apr 16, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.

Affected (5)

Bea
3 products
Liquid Data
Weblogic Integration
Weblogic Server
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Liquid Data
Version 1.1
Bea
Weblogic Integration
Version 2.0
Weblogic Integration
Version 7.0
Bea
Weblogic Server
Version 5.1
Weblogic Server
Version 7.0

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.