CVE-2008-4010
First published: Tue Oct 14 2008(Updated: )
Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI tags."
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle BEA Product Suite | =8.1-sp6 | |
| Oracle BEA Product Suite | =10.0-mp1 | |
| Oracle BEA Product Suite | =10.2 | |
| Oracle BEA Product Suite | =10.3 | |
| Oracle BEA Product Suite | =9.2-mp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/32302
- https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html
- http://www.securitytracker.com/id?1021056
- http://www.vupen.com/english/advisories/2008/2825
- http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45909
Frequently Asked Questions
What is the severity of CVE-2008-4010?
CVE-2008-4010 has a moderate severity level that can affect confidentiality, integrity, and availability.
How do I fix CVE-2008-4010?
To fix CVE-2008-4010, it is recommended to apply the latest security patches provided by Oracle for the affected versions of the BEA Product Suite.
Which versions are affected by CVE-2008-4010?
CVE-2008-4010 affects multiple versions of the Oracle BEA Product Suite, including 8.1 SP6, 9.2 MP3, 10.0 MP1, 10.2, and 10.3.
What components of the BEA Product Suite are vulnerable in CVE-2008-4010?
The vulnerability in CVE-2008-4010 is found in the WebLogic Workshop component of the BEA Product Suite.
Can CVE-2008-4010 be exploited remotely?
Yes, CVE-2008-4010 can be exploited by remote attackers via unspecified vectors.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/event
- agent/tags
- agent/first-publish-date
- agent/description
- agent/source
- vendor/oracle
- canonical/oracle bea product suite
- version/oracle bea product suite/8.1-sp6
- version/oracle bea product suite/10.0-mp1
- version/oracle bea product suite/10.2
- version/oracle bea product suite/10.3
- version/oracle bea product suite/9.2-mp3