CVE-2009-3396

2009-10-2218:30:00

oracle

web.nvd.nist.gov

cve-2009-3396

weblogic server

bea product suite

vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

68.5%

JSON

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to affect integrity, related to WLS Console.

Affected configurations

Nvd

Node

oraclebea_product_suiteMatch9.0

oraclebea_product_suiteMatch9.1

oraclebea_product_suiteMatch9.2.3

oraclebea_product_suiteMatch10.0.1

oraclebea_product_suiteMatch10.3

VendorProductVersionCPE
oraclebea_product_suite9.0cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
oraclebea_product_suite9.1cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
oraclebea_product_suite9.2.3cpe:2.3:a:oracle:bea_product_suite:9.2.3:*:*:*:*:*:*:*
oraclebea_product_suite10.0.1cpe:2.3:a:oracle:bea_product_suite:10.0.1:*:*:*:*:*:*:*
oraclebea_product_suite10.3cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	bea_product_suite	9.0	cpe:2.3:a:oracle:bea_product_suite:9.0:::::::*
oracle	bea_product_suite	9.1	cpe:2.3:a:oracle:bea_product_suite:9.1:::::::*
oracle	bea_product_suite	9.2.3	cpe:2.3:a:oracle:bea_product_suite:9.2.3:::::::*
oracle	bea_product_suite	10.0.1	cpe:2.3:a:oracle:bea_product_suite:10.0.1:::::::*
oracle	bea_product_suite	10.3	cpe:2.3:a:oracle:bea_product_suite:10.3:::::::*