Unscored severity · published Feb 21, 2008
CVE-2008-0867
Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aqualogic Interaction · Bea Systems
6.1; 6.1 · source: NVD
PF
Plumtree Foundation · Bea Systems
6.0; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0867
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0867
dev2dev.bea.com
http://dev2dev.bea.com/pub/advisory/259
Vendor Advisory
http://secunia.com/advisories/29040
www.procheckup.com
http://www.procheckup.com/Vulnerability_PR06-12.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/488346/100/100/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1019440
www.vupen.com
http://www.vupen.com/english/advisories/2008/0610
More from Aqualogic Interaction
–
CVE-2008-0904
Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary…