CVE-2009-1002

2009-04-1510:30:00

oracle

web.nvd.nist.gov

cve-2009-1002

oracle bea

weblogic server

remote attack

privilege escalation

vulnerability

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

74.6%

JSON

Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold through MP3, 9.1, 9.0, 8.1 Gold through SP6, and 7.0 Gold through SP7 allows remote attackers to gain privileges via unknown vectors.

Affected configurations

Nvd

Node

oraclebea_product_suiteMatch7.0sp7

oraclebea_product_suiteMatch8.1sp6

oraclebea_product_suiteMatch9.0

oraclebea_product_suiteMatch9.1

oraclebea_product_suiteMatch9.2mp3

oraclebea_product_suiteMatch10.0mp1

oraclebea_product_suiteMatch10.3

VendorProductVersionCPE
oraclebea_product_suite7.0cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
oraclebea_product_suite8.1cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
oraclebea_product_suite9.0cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
oraclebea_product_suite9.1cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
oraclebea_product_suite9.2cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
oraclebea_product_suite10.0cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
oraclebea_product_suite10.3cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	bea_product_suite	7.0	cpe:2.3:a:oracle:bea_product_suite:7.0:sp7::::::
oracle	bea_product_suite	8.1	cpe:2.3:a:oracle:bea_product_suite:8.1:sp6::::::
oracle	bea_product_suite	9.0	cpe:2.3:a:oracle:bea_product_suite:9.0:::::::*
oracle	bea_product_suite	9.1	cpe:2.3:a:oracle:bea_product_suite:9.1:::::::*
oracle	bea_product_suite	9.2	cpe:2.3:a:oracle:bea_product_suite:9.2:mp3::::::
oracle	bea_product_suite	10.0	cpe:2.3:a:oracle:bea_product_suite:10.0:mp1::::::
oracle	bea_product_suite	10.3	cpe:2.3:a:oracle:bea_product_suite:10.3:::::::*