ID CVE-2008-2581
Summary Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
    cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
  • cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
    cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
  • cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
    cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
  • cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server_component:7.0:sp7:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server_component:7.0:sp7:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server_component:8.1:sp6:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server_component:8.1:sp6:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server_component:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server_component:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server_component:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server_component:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server_component:9.2:mp3:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server_component:9.2:mp3:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server_component:10.0:mp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server_component:10.0:mp1:*:*:*:*:*:*
CVSS
Base: 5.1 (as of 08-08-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:P/A:P
refmap via4
confirm http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
hp
  • HPSBMA02133
  • SSRT061201
sectrack 1020498
secunia
  • 31087
  • 31113
vupen
  • ADV-2008-2109
  • ADV-2008-2115
xf oracle-weblogic-uddiexplorer-unauth-access(43824)
Last major update 08-08-2017 - 01:31
Published 15-07-2008 - 23:41
Back to Top