CVE-2008-2581: Medium severity oracle weblogic server vulnerability

Published Jul 15, 2008

Updated

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer.

Affected Software

12 affected components

Oracle WebLogic Server component=7.0-sp7

Oracle WebLogic Server component=8.1-sp6

Oracle WebLogic Server component=10.0-mp1

Oracle WebLogic Server component=9.1

Oracle BEA Product Suite=9.1

Oracle BEA Product Suite=8.1-sp6

Oracle BEA Product Suite=10.0-mp1

Oracle BEA Product Suite=7.0-sp7

Oracle WebLogic Server component=9.0

Oracle WebLogic Server component=9.2-mp3

Oracle BEA Product Suite=9.0

Oracle BEA Product Suite=9.2-mp3

Event History

Jul 15, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2581?

The severity of CVE-2008-2581 is currently unspecified, but it has potential remote attack vectors.

What versions of Oracle BEA Product Suite are affected by CVE-2008-2581?

CVE-2008-2581 affects Oracle BEA Product Suite versions 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, and 10.0 MP1.

How do I fix CVE-2008-2581?

To fix CVE-2008-2581, ensure that you update your Oracle BEA Product Suite and WebLogic Server to the latest security patches.

Is CVE-2008-2581 a critical vulnerability?

While CVE-2008-2581 is unspecified in terms of criticality, any vulnerability with remote attack vectors should be taken seriously.

Can CVE-2008-2581 be exploited remotely?

Yes, CVE-2008-2581 has potential remote attack vectors enabling exploitation without direct access.