medium6.8Public exploit code
CVE-2009-1975
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availabi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle WebLogic Server 10.3 - 'console-help.portal' Cross-Site Scripting2009-06-14 · remote · multiple · Verified
Impact
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Bea Product Suite | Version 10.3 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/35776
- http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
- http://www.securityfocus.com/bid/35673
- http://www.securitytracker.com/id?1022561
- http://www.vupen.com/english/advisories/2009/1900
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51759
- http://secunia.com/advisories/35776
- http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
- http://www.securityfocus.com/bid/35673
- http://www.securitytracker.com/id?1022561
- http://www.vupen.com/english/advisories/2009/1900
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51759