6.8med
CVE-2004-21151 exploit
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitr…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
58.4%
percentile 99%
Public exploits
1
Exploit-DB
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.
Exploit prediction (EPSS)
58.35% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- EDB-23593 Oracle HTTP Server 8.1.7/9.0.1/9.2 - isqlplus Cross-Site Scripting · remote · 2004-01-24
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/14930 · vdb-entry, x_refsource_XF, x_transferred
- marc.info /?l=bugtraq&m=107496560106967&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/9484 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2004-2115
- NVD: CVE-2004-2115
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.