medium6.4Public exploit code
CVE-2010-2375
Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle WebLogic Server 10.3.3 - Encoded URL2010-07-13 · remote · multiple · Verified
Impact
Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea | Weblogic Server | Versions 7.0, 8.1, 9.0, 9.1, 9.2 |
| Bea Systems | Weblogic Server | Version 10.0 |
| Oracle | Weblogic Server | Versions 10.3.2.0.0, 10.3.3.0.0 |