CVE-2009-2002
published 2009-10-22CVE-2009-2002: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect…
PriorityP419medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.08%
79.3th percentile
Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | bea_product_suite | — | — |
| oracle | bea_product_suite | — | — |
| oracle | bea_product_suite | — | — |
| oracle | bea_product_suite | — | — |
| oracle | bea_product_suite | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-82j4-9f5j-mmfx: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8
ghsa_unreviewed·2022-05-02
CVE-2009-2002 [MEDIUM] GHSA-82j4-9f5j-mmfx: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8
Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.
GHSA
Apache Tomcat Leaks Pathname Information via Error Message
ghsa·2022-04-30
CVE-2002-2009 [MEDIUM] CWE-209 Apache Tomcat Leaks Pathname Information via Error Message
Apache Tomcat Leaks Pathname Information via Error Message
Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.
Red Hat
CVE-2009-0653: OpenSSL, probably 0
vendor_redhat·CVSS 7.5
CVE-2009-0653 [HIGH] CVE-2009-0653: OpenSSL, probably 0
OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970.
Statement: Not vulnerable. This issue was addressed in upstream OpenSSL prior to 0.9.6 and therefore does not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.
No detection rules found.
No writeups or analysis indexed.
http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.htmlhttp://www.securityfocus.com/bid/36774http://www.securitytracker.com/id?1023062http://www.us-cert.gov/cas/techalerts/TA09-294A.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.htmlhttp://www.securityfocus.com/bid/36774http://www.securitytracker.com/id?1023062http://www.us-cert.gov/cas/techalerts/TA09-294A.html
2009-10-22
Published