medium5.8Public exploit code
CVE-2010-4437
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attacke…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle WebLogic - POST Session Fixation2011-03-11 · webapps · multiple
Impact
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Fusion Middleware | Versions 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3 |
References
- NVD record
- CVE.org record
- http://osvdb.org/70571
- http://secunia.com/advisories/42975
- http://securityreason.com/securityalert/8126
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
- http://www.securityfocus.com/bid/45852
- http://www.securitytracker.com/id?1024981
- http://www.vupen.com/english/advisories/2011/0143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64764
- http://osvdb.org/70571
- http://secunia.com/advisories/42975
- http://securityreason.com/securityalert/8126
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
- http://www.securityfocus.com/bid/45852
- http://www.securitytracker.com/id?1024981
- http://www.vupen.com/english/advisories/2011/0143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64764