VulnerabilityModified
CVE-2008-2579
Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors.
HIGH 7.5EPSS 3.09%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.09%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 3.09% probability · 87th percentile
- CISA KEV
- Not listed
- Affected
- oracle/weblogic server
- Source
- cve@mitre.org
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143Broken Link
- http://jvn.jp/en/jp/JVN81667751/index.htmlThird Party Advisory
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000040.htmlThird Party Advisory, VDB Entry
- http://secunia.com/advisories/31087Third Party Advisory
- http://secunia.com/advisories/31113Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.htmlBroken Link
- http://www.securitytracker.com/id?1020498Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2109/referencesThird Party Advisory
- http://www.vupen.com/english/advisories/2008/2115Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43823Third Party Advisory, VDB Entry
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143Broken Link
- http://jvn.jp/en/jp/JVN81667751/index.htmlThird Party Advisory
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000040.htmlThird Party Advisory, VDB Entry
- http://secunia.com/advisories/31087Third Party Advisory
- http://secunia.com/advisories/31113Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.htmlBroken Link
- http://www.securitytracker.com/id?1020498Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2109/referencesThird Party Advisory
- http://www.vupen.com/english/advisories/2008/2115Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43823Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.