CVE Feed

    Dashboard / CVE / CVE-2006-6703

    CVE-2006-6703

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.

    Published:Dec 23, 2006
    Last Modified:Apr 23, 2026
    EPS:Dec 23, 2006
    EPSS Score:0.13774
    CVSS Score:6.8

    Affected Products

    Vendor
    Oracle
    Product
    Oracle10g
    Vendor
    Oracle
    Product
    Oracle9i

    Exploits

    https://www.exploit-db.com/exploits/29308

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-3856 (CVSS 6.5) — Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 1…
    CVE-2006-1705 (CVSS 2.1) — Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, up…
    CVE-2006-0586 (CVSS 7.5) — Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to e…
    CVE-2006-0552 (CVSS 7.5) — Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FI…
    CVE-2006-0272 (CVSS 9) — Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has uns…
    CVE-2006-0262 (CVSS 10) — Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.…
    CVE-2006-0271 (CVSS 10) — Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2…
    CVE-2006-0269 (CVSS 5.5) — Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has…
    CVE-2005-4832 (CVSS 7.5) — SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arb…
    CVE-2005-3641 (CVSS 7.5) — Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass aut…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High