Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTML or web script via the EXPTYPE parameter, aka SES01.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ultra Search'boundary_rules.jsp'跨站脚本攻击漏洞
Vulnerability Description
Administration Front End for Oracle Enterprise (Ultra) Search的boundary_rules.jsp中存在跨站脚本攻击漏洞。当在数据库服务器，应用程序服务器中被使用时，存在跨站脚本攻击漏洞。远程攻击者可以借助EXPTYPE参数，注入任意的HTML或web脚本。又称SES01。
CVSS Information
N/A
Vulnerability Type
N/A