CVE:CVE-2008-0868
CNNVD:CNNVD-200802-392
BEA WebLogic Portal的Groupspace存在跨站脚本攻击漏洞。远程授权用户可以通过未知向量注入任意Web脚本或HTML。
solution:Upgrade bea_systems weblogic_portal to a higher version than 10.0,and avoid the version 10.0; Upgrade oracle weblogic_portal to a higher version than 9.2,and avoid the version 9.2