CVE-2008-5461

CWE-200 — Information ExposureCWE-2644 documents4 sources
Severity
6.8MEDIUM
EPSS
0.8%
top 25.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle BEA Product Suite
Timeline
PublishedJan 14
Latest updateMay 17

Description

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, and availability, related to WLS. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is cross-site scripting.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDoracle/bea_product_suite7 versions+6

🔴Vulnerability Details

2
GHSA
GHSA-qw6f-47p6-c25p: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10↗2022-05-17
▶
CVEList
CVE-2008-5461: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10↗2009-01-14
▶

💬Community

1
Bugzilla
CVE-2008-0628 java-1.6.0 default external entity processing↗2008-02-04
▶
CVE-2008-5461 (MEDIUM CVSS 6.8) | Unspecified vulnerability in the We | cvebase.io