← Database

CVE-2006-6703

MEDIUM CVSS: 6.8 Published: 2006-12-23 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.

Affected Platforms

Oracle Oracle10GOracle Oracle9I

Weakness Type

NVD-CWE-Other

References