CVE-2010-2375

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:bea:weblogic_server:7.0:sp7::::::
	cpe:2.3:a:bea:weblogic_server:8.1:sp6::::::
	cpe:2.3:a:bea:weblogic_server:9.0:::::::*
	cpe:2.3:a:bea:weblogic_server:9.1:::::::*
	cpe:2.3:a:bea:weblogic_server:9.2:mp3::::::
	cpe:2.3:a:bea_systems:weblogic_server:10.0:mp2::::::
	cpe:2.3:a:oracle:weblogic_server:10.3.2.0.0:::::::*
	cpe:2.3:a:oracle:weblogic_server:10.3.3.0.0:::::::*

History

No history.

Information

Published : 2010-07-13 22:30

Updated : 2018-10-30 16:27

NVD link : CVE-2010-2375

Mitre link : CVE-2010-2375

CVE.ORG link : CVE-2010-2375

JSON object : View

Products Affected

bea_systems

weblogic_server

oracle

weblogic_server

bea

weblogic_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2010-2375", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-07-13T22:30:02.547", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS."}, {"lang": "es", "value": "Paquete/Privilegio: Plugins para Apache, Sun y servicios web IIS, vulnerabilidad no especificada en el componente WebLogic Server de Oracle Fusion Middleware v7.0 SP7, v8.1 SP6, v9.0, v9.1, v9.2 MP3, v10.0 MP2, v10.3.2 y v10.3.3, permite a atacantes remotos afectar la confidencialidad e integridad, relacionado con IIS."}], "lastModified": "2018-10-30T16:27:30.653", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"}, {"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"}, {"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CA97F1A-49F7-4511-8959-D62155491DF5"}, {"criteria": "cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"}, {"criteria": "cpe:2.3:a:bea:weblogic_server:9.2:mp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73264312-A7AE-4974-A46D-70D8336A0B5B"}, {"criteria": "cpe:2.3:a:bea_systems:weblogic_server:10.0:mp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADF4D7FE-55C5-4CBA-B75E-5A30E73AF402"}, {"criteria": "cpe:2.3:a:oracle:weblogic_server:10.3.2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58B1DD57-050A-4A82-9E73-0C29DC22B581"}, {"criteria": "cpe:2.3:a:oracle:weblogic_server:10.3.3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30D1EC44-6231-4710-B9FB-7551781814EB"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}