Lucene search

MitreCVE-2008-2580

HistoryJul 15, 2008 - 11:41 p.m.

CVE-2008-2580

2008-07-1523:41:00

mitre

web.nvd.nist.gov

cve-2008-2580

weblogic server

oracle

bea product suite

vulnerability

remote attack vectors

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

72.6%

JSON

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors.

Affected configurations

Nvd

Node

oraclebea_product_suite

oraclebea_product_suiteMatch9.0

oraclebea_product_suiteMatch9.1

oraclebea_product_suiteMatch9.2mp3

oraclebea_product_suiteMatch10.0mp1

oracleweblogic_server_component

VendorProductVersionCPE
oraclebea_product_suite*cpe:2.3:a:oracle:bea_product_suite:*:*:*:*:*:*:*:*
oraclebea_product_suite9.0cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
oraclebea_product_suite9.1cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
oraclebea_product_suite9.2cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
oraclebea_product_suite10.0cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
oracleweblogic_server_component*cpe:2.3:a:oracle:weblogic_server_component:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	bea_product_suite	*	cpe:2.3:a:oracle:bea_product_suite::::::::
oracle	bea_product_suite	9.0	cpe:2.3:a:oracle:bea_product_suite:9.0:::::::*
oracle	bea_product_suite	9.1	cpe:2.3:a:oracle:bea_product_suite:9.1:::::::*
oracle	bea_product_suite	9.2	cpe:2.3:a:oracle:bea_product_suite:9.2:mp3::::::
oracle	bea_product_suite	10.0	cpe:2.3:a:oracle:bea_product_suite:10.0:mp1::::::
oracle	weblogic_server_component	*	cpe:2.3:a:oracle:weblogic_server_component::::::::

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143

secunia.com/advisories/31087

secunia.com/advisories/31113

www.oracle.com/technetwork/topics/security/cpujul2008-090335.html

www.securitytracker.com/id?1020498

www.vupen.com/english/advisories/2008/2109/references

www.vupen.com/english/advisories/2008/2115

exchange.xforce.ibmcloud.com/vulnerabilities/43829

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

72.6%

JSON

Related for CVE-2008-2580