Oracle Fusion Middleware BPEL Console Cross Site Scripting Vulnerability

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: LOW

  CVE Identifier: CVE-2010-3581

  Advisory Date: JUL 21, 2015

---

  DESCRIPTION

Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1000552

  Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention

  AFFECTED SOFTWARE AND VERSION

• oracle fusion_middleware 11.1.1.1.0
• oracle fusion_middleware 11.1.1.2.0