Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2003-0623

Disclosure Date: December 01, 2003 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument.
0
0
Attacker Value
Unknown

CVE-2003-0622

Disclosure Date: December 01, 2003 (last updated February 22, 2025)
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.
0
0
Attacker Value
Unknown

CVE-2003-0621

Disclosure Date: December 01, 2003 (last updated February 22, 2025)
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.
0
0