Oracle WebLogic JSP Pages and Servlets Unspecified Information Disclosure (CVE-2008-5460)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified, remote information disclosure vulnerability in JSP pages and servlets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2008-5460

CVE-2008-5460 concerns an unspecified information disclosure in Oracle WebLogic Server (BEA Product Suite) across versions 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0. A Nessus plugin indicates the vulnerability affects JSP pages and servlets, enabling remote disclosure of information. The root cause a...