CVE-2006-6703: Oracle ORACLE10G

Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.

Affected products

• Oracle ORACLE10G: any version
• Oracle ORACLE9I: any version

Published 2006-12-23. Last modified 2026-06-16.