CVE:CVE-2007-2119
CNNVD:CNNVD-200704-360
Administration Front End for Oracle Enterprise (Ultra) Search的boundary_rules.jsp中存在跨站脚本攻击漏洞。当在数据库服务器，应用程序服务器中被使用时，存在跨站脚本攻击漏洞。远程攻击者可以借助EXPTYPE参数，注入任意的HTML或web脚本。又称SES01。
solution:Upgrade oracle application_server to a higher version than 9.0.4.3,10.1.2.0.2,10.1.2.2,and avoid the version 9.0.4.3,10.1.2.0.2,10.1.2.2; Upgrade oracle database_server to a higher version than 9.2.0.8,10.1.0.5,10.2.0.2,and avoid the version 9.2.0.8,10.1.0.5,10.2.0.2