Description

A vulnerability has been identified in WebLogic possibly allowing malicious people to conduct Cross Site Scripting attacks.

The problem is that certain parameters aren't verified properly before they are returned to the user. This could be exploited to conduct Cross Site Scripting attacks.

Several sample scripts are affected by this. Custom build applications could also be affected.

Solution
Developers should consult the BEA advisory and BEA documentation for information about how to code secure web applications using BEA.
Further details available to Secunia VIM customers

Original Advisory
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp

Deep Links
Links available to Secunia VIM customers