The BEA WebLogic Server Console suffers from a HTML injection vulnerability. Version 10.0 is affected.