CVE-2005-4549
Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the (1) RowKeyValue parameter in the PORTAL schema; and the (2) title and (3) content input fields when creating an forum article.
- Affected products
- Oracle Application Server
- Oracle Application Server Discussion Forum Portlet
- All versions
- CVSS 2.0
- 4.3 MEDIUM
- EPSS
- 2.7% (85th percentile)
- NVD status
- Modified
- Published
- 2005-12-28
CVE-2005-4549 at NVD
No indexed exploits for CVE-2005-4549 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2005-4549 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.