CVE-2004-2115

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other…

published May 27, 2005

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
58%
Percentile
99.1
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.58352 · 99.1th percentile
Published
2005-05-27T04:00Z
EPSS history
Timeline
  • 27 MAY 04:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other…
    cvelistv5