CVE-2012-2631

WebLogic <1.5.2.0 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Various Sources] http://www.atmarkweb.jp/atcart/

[Third Party Advisory] http://jvn.jp/en/jp/JVN78305073/index.html

[Third Party Advisory] http://jvndb.jvn.jp/jvndb/JVNDB-2012-000055

Scores

EPSS 0.0025

EPSS Percentile 48.5%

Classification

CWE

CWE-79

Status published

Affected Products (11)

atmarkweb/\@web_shoppingcart

atmarkweb/\@web_shoppingcart_t < 1.5.0.1

atmarkweb/\@web_shoppingcart < 1.5.1.0

atmarkweb/\@web_shoppingcart

n/a/n/a

Timeline

Published Jun 15, 2012

Tracked Since Feb 18, 2026