CVE-2009-2002

CWE-2096 documents6 sources
Severity
4.3MEDIUM
EPSS
0.9%
top 24.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle BEA Product Suite
Timeline
PublishedOct 22
Latest updateMay 2

Description

Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/bea_product_suite5 versions+4

🔴Vulnerability Details

3
GHSA
GHSA-82j4-9f5j-mmfx: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8↗2022-05-02
▶
GHSA
Apache Tomcat Leaks Pathname Information via Error Message↗2022-04-30
▶
CVEList
CVE-2009-2002: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8↗2009-10-22
▶

💥Exploits & PoCs

1
Exploit-DB
Nuked-klaN SP4 - Remote File Inclusion↗2009-12-26
▶

📋Vendor Advisories

1
Red Hat
CVE-2009-0653: OpenSSL, probably 0↗
▶
CVE-2009-2002 (MEDIUM CVSS 4.3) | Unspecified vulnerability in the We | cvebase.io