Vulnerabilities > CVE-2009-1974 - Remote vulnerability in Oracle WebLogic Server

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

oracle

NVD

Published: 2009-07-14

Updated: 2017-08-17

Summary

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package.

Vulnerable Configurations

Part	Description	Count
Application	Oracle Oracle BEA Product Suite 7.0 Oracle BEA Product Suite 8.1 Oracle BEA Product Suite 9.0 Oracle BEA Product Suite 9.1 Oracle BEA Product Suite 9.2 Oracle BEA Product Suite 10.0 Oracle BEA Product Suite 10.3	7

References

http://osvdb.org/55906
http://secunia.com/advisories/35776
http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
http://www.securityfocus.com/bid/35674
http://www.securitytracker.com/id?1022561
http://www.vupen.com/english/advisories/2009/1900
https://exchange.xforce.ibmcloud.com/vulnerabilities/51758