Threats tagged 'ghsa-jj42-75hx-q362'

This vulnerability allows an authenticated user with the 'aaConfigTools' privilege to tamper with App Objects' help files during configuration-time operations within the IDE component of the Application Server. Successful exploitation can persist a cross-site scripting (XSS) injection that may lead to horizontal or vertical privilege escalation when executed by a victim user. Run-time components and operations are not affected by this vulnerability.