CVE-2005-0873

Published: May 2, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter.

Affected (1)

Products: Oracle: 10g Reports Server

Oracle

1 product

10g Reports Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oracle 10g Reports Server	Version 9.0.4.3.3

References (16)

http://marc.info/?l=bugtraq&m=111168323804203&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17250

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/210524

Source: cve@mitre.org

US Government Resource

http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html

Source: cve@mitre.org

http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/12892

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/15134

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA05-292A.html

Source: cve@mitre.org

US Government Resource

http://marc.info/?l=bugtraq&m=111168323804203&w=2