CVE-2009-1008

2009-04-1510:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2009-1008

oracle

application server

outside in technology

vulnerability

local users

confidentiality

integrity

availability

html

nvd

5.6 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1010.

CPENameOperatorVersion
ibm:websphere_portalibm websphere portaleq6.0.1.0
ibm:websphere_portalibm websphere portaleq7.0.0.0
ibm:websphere_portalibm websphere portaleq8.0.0.0
ibm:websphere_portalibm websphere portaleq6.1.5.0
ibm:websphere_portalibm websphere portaleq6.0.0.0
ibm:websphere_portalibm websphere portaleq6.1.0.0
oracle:application_serveroracle application servereq8.2.2
oracle:application_serveroracle application servereq8.3.0

CPE	Name	Operator	Version
ibm:websphere_portal	ibm websphere portal	eq	6.0.1.0
ibm:websphere_portal	ibm websphere portal	eq	7.0.0.0
ibm:websphere_portal	ibm websphere portal	eq	8.0.0.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.0
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.0
oracle:application_server	oracle application server	eq	8.2.2
oracle:application_server	oracle application server	eq	8.3.0