Unrated severityNVD Advisory· Published Jul 26, 2005· Updated Apr 16, 2026
CVE-2005-2379
CVE-2005-2379
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) debug parameter to showenv, (2) test parameter to parsequery, or (3) delimiter or (4) CELLWRAPPER parameter to rwservlet.
Affected products
1- cpe:2.3:a:oracle:reports:9.0.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.red-database-security.com/advisory/oracle_reports_various_css.htmlnvdExploitVendor Advisory
- marc.infonvd
News mentions
0No linked articles in our index yet.