CVE-2010-0068

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html
http://www.us-cert.gov/cas/techalerts/TA10-012A.html	US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:bea_product_suite:9.0:::::::*
	cpe:2.3:a:oracle:bea_product_suite:9.1:::::::*
	cpe:2.3:a:oracle:bea_product_suite:9.2:mp2::::::
	cpe:2.3:a:oracle:bea_product_suite:10.0:::::::*

History

No history.

Information

Published : 2010-01-13 01:30

Updated : 2024-02-04 17:54

NVD link : CVE-2010-0068

Mitre link : CVE-2010-0068

CVE.ORG link : CVE-2010-0068

JSON object : View

Products Affected

oracle

bea_product_suite

CWE

NVD-CWE-noinfo

{"id": "CVE-2010-0068", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-01-13T01:30:00.983", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "tags": ["US Government Resource"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors."}, {"lang": "es", "value": "vulnerabilidad inespec\u00edfica en el componente WebLogic Server en BEA Product Suite v9.0, v9.1, v9.2MP2, y v10.0 permite a atacantes remotos influir en la confidencialidad a trav\u00e9s de vectores desconocidos."}], "lastModified": "2012-10-23T03:17:03.883", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"}, {"criteria": "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09215858-8A4F-4595-98DD-39027EC6CC1A"}, {"criteria": "cpe:2.3:a:oracle:bea_product_suite:9.2:mp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00200F71-DBBB-42B4-B9EC-875FFE4B3148"}, {"criteria": "cpe:2.3:a:oracle:bea_product_suite:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4508CDC6-27BC-4F5C-9F1C-D976200E572B"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}