Lucene search

[email protected]CVE-2009-3399

HistoryOct 22, 2009 - 6:30 p.m.

CVE-2009-3399

2009-10-2218:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2009-3399

weblogic server

bea product suite

remote attackers

integrity

nvd

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.2%

JSON

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, related to WLS Console.

CPENameOperatorVersion
oracle:bea_product_suiteoracle bea product suiteeq7.0.6

CPE	Name	Operator	Version
oracle:bea_product_suite	oracle bea product suite	eq	7.0.6

References

www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html

www.securityfocus.com/bid/36769

www.securitytracker.com/id?1023062

www.us-cert.gov/cas/techalerts/TA09-294A.html

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.2%

JSON

Related for CVE-2009-3399

prion1 securityvulns2 oracle1