Unscored severity · published Jul 15, 2008
CVE-2008-2579
Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7,…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
WebLogic Server · Oracle
6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2579
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2579
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
Third Party Advisory
http://jvn.jp/en/jp/JVN81667751/index.html
Third Party Advisory
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000040.html
Third Party Advisory
http://secunia.com/advisories/31087
Third Party Advisory
http://secunia.com/advisories/31113
Broken Link
http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
More from WebLogic Server
9.8
CVE-2022-22965
Spring Framework JDK 9+ Remote Code Execution Vulnerability
9.8
CVE-2020-14750
Oracle WebLogic Server Remote Code Execution Vulnerability
9.8
CVE-2020-14882
Oracle WebLogic Server Remote Code Execution Vulnerability
9.8
CVE-2020-14644
Oracle WebLogic Server Remote Code Execution Vulnerability
9.8
CVE-2020-2883
Oracle WebLogic Server Unspecified Vulnerability