Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-3581 — Oracle Fusion Middleware vulnerability

5 documents5 sources

Severity

3.5LOWNVD

EPSS

5.3%

top 9.92%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Oracle Fusion Middleware

Timeline

PublishedOct 14

Latest updateMay 17

Description

Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/fusion_middleware11.1.1.1.0, 11.1.1.2.0+1

🔴Vulnerability Details

GHSA

GHSA-7g6f-fm93-jgcm: Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11↗2022-05-17

▶

CVEList

CVE-2010-3581: Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11↗2010-10-14

▶

💥Exploits & PoCs

Exploit-DB

Oracle Fusion Middleware 10.1.2/10.1.3 - BPEL Console Cross-Site Scripting↗2010-10-12

▶

🔍Detection Rules

Suricata

ET WEB_SPECIFIC_APPS Oracle Fusion Middleware BPEL Console Cross Site Scripting↗2010-10-28

▶