Detections
Analytics
Oracle Reports Server test.jsp Multiple Parameter XSS
medium Nessus Plugin ID 17614
Language:
Synopsis
The remote host has an application that is affected by a cross-site scripting vulnerability.Description
The remote host is running Oracle Report Server, a reporting application. The remote version of this software contains to a cross-site scripting vulnerability that may allow an attacker to use the remote host to perform a cross-site scripting attack.Solution
Disable access to the file 'reports/Tools/test.jsp'Plugin Details
Severity: Medium
ID: 17614
File Name: oracle_report_server_xss.nasl
Version: 1.20
Type: remote
Family: Databases
Published: 3/24/2005
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:oracle:10g_reports_server
Required KB Items: www/OracleApache
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 3/25/2005
Reference Information
CVE: CVE-2005-0873
BID: 12892