Vulnerabilities

TI-2008-00868 CVE-2008-0904 · GHSA-qfgr-q8f7-r48h

Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1…

LOW 37

Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01471 Published 2008-02-22 No fix listed CWE-200

TI-2008-00833 CVE-2008-0867 · GHSA-fcg2-cvfp-6qwf

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction…

LOW 23

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the nam…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2008-02-21 No fix listed CWE-79

Vulnerabilities

Filters

Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1…

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction…