CVE-2009-1010

2009-04-1510:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2009-1010

outside in technology

oracle

application server

html

confidentiality

integrity

availability

5.6 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008.

CPENameOperatorVersion
ibm:websphere_portalibm websphere portaleq6.0.1.0
ibm:websphere_portalibm websphere portaleq7.0.0.0
ibm:websphere_portalibm websphere portaleq8.0.0.0
ibm:websphere_portalibm websphere portaleq6.1.5.0
ibm:websphere_portalibm websphere portaleq6.0.0.0
ibm:websphere_portalibm websphere portaleq6.1.0.0
oracle:application_serveroracle application servereq8.2.2
oracle:application_serveroracle application servereq8.3.0

CPE	Name	Operator	Version
ibm:websphere_portal	ibm websphere portal	eq	6.0.1.0
ibm:websphere_portal	ibm websphere portal	eq	7.0.0.0
ibm:websphere_portal	ibm websphere portal	eq	8.0.0.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.0
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.0
oracle:application_server	oracle application server	eq	8.2.2
oracle:application_server	oracle application server	eq	8.3.0