Oracle Application Server Discussion Forum Portlet vulnerabilities

2 CVEs affecting Oracle Application Server Discussion Forum Portlet, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-4550, published 2005-12-28.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-4550, published 2005-12-28. Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days. The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter…
• CVE-2005-4549, published 2005-12-28. Medium severity, CVSS 4.3. EPSS: 2.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the (1) RowKeyValue…