PT-2009-1289 · Bea · Weblogic Portal

Published 2009-01-14 · Updated 2012-10-23 · CVE-2008-5462

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BEA Product Suite versions 8.1 SP6, 9.2 MP3, 10.0 MP1, 10.2, 10.3

Description The issue affects the confidentiality, integrity, and availability of the system. It is related to an unspecified vulnerability in the WebLogic Portal component.

Recommendations For BEA Product Suite versions 8.1 SP6, 9.2 MP3, 10.0 MP1, 10.2, 10.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-5462

Affected Products

Weblogic Portal

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5462 · Security Note
• http://vupen.com/english/advisories/2009/0115 · Note
• http://securityfocus.com/bid/33177 · Note
• http://securitytracker.com/id?1021571 · Note
• http://oracle.com/technetwork/topics/security/cpujan2009-097901.html · Note