CVE-2004-2435

Description

Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1) debugging or (2) utility scripts.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17543

http://www.securitytracker.com/alerts/2004/Sep/1011433.html

http://www.securityfocus.com/bid/11275

http://www.auscert.org.au/render.html?it=4419

http://secunia.com/advisories/12674/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS