| ID |
CVE-2009-1002
|
| Summary |
Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold through MP3, 9.1, 9.0, 8.1 Gold through SP6, and 7.0 Gold through SP7 allows remote attackers to gain privileges via unknown vectors. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.8 (as of 17-08-2017 - 01:30) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
| refmap
via4
|
| bid | 34461 | | cert | TA09-105A | | confirm | | | sectrack | 1022059 | | xf | oracle-weblogic-wls-priv-escalation2(50052) |
|
| Last major update |
17-08-2017 - 01:30 |
| Published |
15-04-2009 - 10:30 |
| Last modified |
17-08-2017 - 01:30 |
