CVE-2008-0867

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-21 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

Affected products

Bea Systems Aqualogic Interaction: 6.1, 6.1-mp1
Bea Systems Plumtree Foundation: 6.0, 6.0-sp1

References

http://dev2dev.bea.com/pub/advisory/259
http://secunia.com/advisories/29040
http://www.procheckup.com/Vulnerability_PR06-12.php
http://www.securityfocus.com/archive/1/488346/100/100/threaded
http://www.securitytracker.com/id?1019440
http://www.vupen.com/english/advisories/2008/0610
http://dev2dev.bea.com/pub/advisory/259
http://secunia.com/advisories/29040
http://www.procheckup.com/Vulnerability_PR06-12.php
http://www.securityfocus.com/archive/1/488346/100/100/threaded
http://www.securitytracker.com/id?1019440
http://www.vupen.com/english/advisories/2008/0610

Get alerted when CVE-2008-0867 or the next vulnerability affects your stack