CVE-2009-1010

Опубликовано: 15 апр. 2009

Источник: nvd

CVSS2: 4.4

EPSS Низкий

Описание

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008.

Ссылки

http://osvdb.org/53749
Broken Link
http://secunia.com/advisories/34693
Permissions Required
http://www-01.ibm.com/support/docview.wss?uid=swg21660640
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
Third Party Advisory
http://www.securityfocus.com/bid/34461
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022055
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
Third Party Advisory
US Government Resource
http://osvdb.org/53749
Broken Link
http://secunia.com/advisories/34693
Permissions Required
http://www-01.ibm.com/support/docview.wss?uid=swg21660640
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
Third Party Advisory
http://www.securityfocus.com/bid/34461
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022055
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00096

Низкий

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-jj7j-66w6-9293

github

почти 4 года назад