PT-2009-3583 · Oracle · Oracle Bea Weblogic Portal

Published 2009-04-15 · Updated 2017-08-17 · CVE-2009-1001

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle BEA WebLogic Portal versions 8.1 Gold through SP6

Description The issue allows remote authenticated users to gain privileges via unknown vectors.

Recommendations For Oracle BEA WebLogic Portal versions 8.1 Gold through SP6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-1001

Affected Products

Oracle Bea Weblogic Portal

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-1001 · Security Note
• http://securitytracker.com/id?1022059 · Note
• http://securityfocus.com/bid/34461 · Note
• http://us-cert.gov/cas/techalerts/TA09-105A.html · Note
• http://oracle.com/technetwork/topics/security/cpuapr2009-099563.html · Note
• http://oracle.com/technology/deploy/security/wls-security/1001.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50053 · Note
• http://osvdb.org/53767 · Note