CVE-2004-2115
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 58%
from disclosure to weapon0 days
Published on NVDMay 27
1st PoCJan 24
exploitation probability
58%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/23593⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.