Unscored severity · published Jan 14, 2009
CVE-2008-5461
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, and availability, related to WLS. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is cross-site scripting.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BP
Bea Product Suite · Oracle
7.0; 8.1; 9.0; 9.1; 9.2; 10.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5461
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5461
jvn.jp
http://jvn.jp/en/jp/JVN93431860/index.html
Vendor Advisory
http://secunia.com/advisories/33526
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
www.securityfocus.com
http://www.securityfocus.com/bid/33177
www.securitytracker.com
http://www.securitytracker.com/id?1021571
Vendor Advisory
http://www.vupen.com/english/advisories/2009/0115
More from Bea Product Suite
–
CVE-2010-0079
Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remote attackers to affect confidentiality, integrity, and…
–
CVE-2010-0078
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown…
–
CVE-2010-0074
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect…
–
CVE-2010-0069
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity…
–
CVE-2010-0068
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors