Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-5457
HistoryJan 14, 2009 - 2:30 a.m.

CVE-2008-5457

2009-01-1402:30:00
[email protected]
web.nvd.nist.gov
13
oracle
bea weblogic
plugins
apache
sun
iis
web servers
product suite
confidentiality
integrity
availability
remote attackers

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0.968

Percentile

99.7%

JSON

Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected configurations

Nvd
Node
oraclebea_product_suiteMatch7.0sp7
OR
oraclebea_product_suiteMatch8.1sp6
OR
oraclebea_product_suiteMatch9.0
OR
oraclebea_product_suiteMatch9.1
OR
oraclebea_product_suiteMatch9.2mp3
OR
oraclebea_product_suiteMatch10.0mp1
OR
oraclebea_product_suiteMatch10.3
VendorProductVersionCPE
oraclebea_product_suite7.0cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
oraclebea_product_suite8.1cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
oraclebea_product_suite9.0cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
oraclebea_product_suite9.1cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
oraclebea_product_suite9.2cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
oraclebea_product_suite10.0cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
oraclebea_product_suite10.3cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*

Related

cve 1
zdt 1
nessus 1
saint 4
cvelist 1
exploitdb 2
metasploit 1
packetstorm 2
prion 1
exploitpack 1
checkpoint_advisories 1
seebug 1
securityvulns 1
oracle 1
cve
cve
CVE-2008-5457
2009-01-14 02:30:00
zdt
zdt
Oracle WebLogic IIS connector JSESSIONID Remote Overflow Exploit
2009-04-01 00:00:00
nessus
nessus
Oracle WebLogic Server Plug-in Remote Overflow (1166189)
2009-01-15 00:00:00
saint
saint
Oracle WebLogic Server IIS Connector JSESSIONID buffer overflow
2009-04-10 00:00:00
Oracle WebLogic Server IIS Connector JSESSIONID buffer overflow
2009-04-10 00:00:00
Oracle WebLogic Server IIS Connector JSESSIONID buffer overflow
2009-04-10 00:00:00
cvelist
cvelist
CVE-2008-5457
2009-01-14 02:00:00
exploitdb
exploitdb
BEA WebLogic - JSESSIONID Cookie Value Overflow (Metasploit)
2010-07-03 00:00:00
Oracle WebLogic IIS connector JSESSIONID - Remote Overflow
2009-04-01 00:00:00
metasploit
metasploit
BEA WebLogic JSESSIONID Cookie Value Overflow
2009-03-27 19:03:39
packetstorm
packetstorm
BEA Weblogic JSESSIONID Cookie Value Overflow
2009-11-26 00:00:00
Oracle WebLogic IIS Connector Overflow
2009-04-01 00:00:00
prion
prion
Design/Logic Flaw
2009-01-14 02:30:00
exploitpack
exploitpack
Oracle WebLogic IIS connector JSESSIONID - Remote Overflow
2009-04-01 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle BEA WebLogic IIS connector JSESSIONID Stack Buffer Overflow (CVE-2008-5457)
2009-04-27 00:00:00
seebug
seebug
Oracle WebLogic IIS connector JSESSIONID Remote Overflow Exploit
2009-04-02 00:00:00
securityvulns
securityvulns
Oracle applications multiple security vulnerabilities
2009-12-15 00:00:00
oracle
oracle
CPU Jan 2009
2009-01-13 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0.968

Percentile

99.7%

JSON
Related for NVD:CVE-2008-5457
cve1zdt1nessus1saint4cvelist1exploitdb2metasploit1packetstorm2prion1exploitpack1checkpoint_advisories1seebug1securityvulns1oracle1