CVE-2009-1010

2009-04-1510:30:00

[email protected]

web.nvd.nist.gov

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.6

Confidence

Low

EPSS

Percentile

5.3%

JSON

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008.

Affected configurations

Nvd

Node

ibmwebsphere_portalMatch6.0.0.0

ibmwebsphere_portalMatch6.0.1.0

ibmwebsphere_portalMatch6.1.0.0

ibmwebsphere_portalMatch6.1.5.0

ibmwebsphere_portalMatch7.0.0.0

ibmwebsphere_portalMatch8.0.0.0

Node

oracleapplication_serverMatch8.2.2

oracleapplication_serverMatch8.3.0

VendorProductVersionCPE
ibmwebsphere_portal6.0.0.0cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*
ibmwebsphere_portal6.0.1.0cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.0cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.5.0cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*
ibmwebsphere_portal7.0.0.0cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*
ibmwebsphere_portal8.0.0.0cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*
oracleapplication_server8.2.2cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*
oracleapplication_server8.3.0cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_portal	6.0.0.0	cpe:2.3:a:ibm:websphere_portal:6.0.0.0:::::::*
ibm	websphere_portal	6.0.1.0	cpe:2.3:a:ibm:websphere_portal:6.0.1.0:::::::*
ibm	websphere_portal	6.1.0.0	cpe:2.3:a:ibm:websphere_portal:6.1.0.0:::::::*
ibm	websphere_portal	6.1.5.0	cpe:2.3:a:ibm:websphere_portal:6.1.5.0:::::::*
ibm	websphere_portal	7.0.0.0	cpe:2.3:a:ibm:websphere_portal:7.0.0.0:::::::*
ibm	websphere_portal	8.0.0.0	cpe:2.3:a:ibm:websphere_portal:8.0.0.0:::::::*
oracle	application_server	8.2.2	cpe:2.3:a:oracle:application_server:8.2.2:::::::*
oracle	application_server	8.3.0	cpe:2.3:a:oracle:application_server:8.3.0:::::::*