Vulnerability in Peoplesoft Hrms

CVE-2004-2435

Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1) debugging or (2) utility scripts.

EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.

Affected products

Peoplesoft Hrms — versions 7.0
N/a — versions n/a

References

cve@mitre.org (x_refsource_AUSCERT, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)