Information disclosure in Oracle BEA Product Suite

CVE-2008-5460

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect confidentiality via unknown vectors.

Vulnerability class: Information Disclosure

EPSS: 0.011 (63.4th percentile) — read the EPSS interpretation.

Affected products

Oracle Bea_product_suite — versions 9.0, 9.1, 9.2
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)
secalert_us@oracle.com (vdb-entry, x_refsource_VUPEN)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
secalert_us@oracle.com (x_refsource_CONFIRM)
secalert_us@oracle.com (vdb-entry, x_refsource_BID)