Name Cross Site Scripting in BEA Admin Console
Systems Affected BEA Admin Console 8.1
Severity Low Risk
Category Cross Site Scripting (CSS/XSS)
Vendor URL http://www.bea.com
Author Alexander Kornbrust 
Date 28 Apr 2005

Details
One input field in the BEA Admin console is not properly checked. This causes a cross site scripting vulnerability.

Workarounds
None.

Example
http://server:8001/console/actions/jndi/Jn...2CType%3DServer