CVE-2009-1003
First published: Wed Apr 15 2009(Updated: )
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect integrity via unknown vectors related to "access to source code of web pages."
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle BEA Product Suite | =9.1 | |
| Oracle BEA Product Suite | =10.0-mp1 | |
| Oracle BEA Product Suite | =9.0 | |
| Oracle BEA Product Suite | =10.3 | |
| Oracle BEA Product Suite | =9.2-mp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securitytracker.com/id?1022059
- http://www.us-cert.gov/cas/techalerts/TA09-105A.html
- http://osvdb.org/53762
- http://www.oracle.com/technology/deploy/security/wls-security/1003.html
- http://www.securityfocus.com/bid/34461
- http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50054
Frequently Asked Questions
What is the severity of CVE-2009-1003?
CVE-2009-1003 is classified as a vulnerability that can potentially affect integrity due to access issues.
How do I fix CVE-2009-1003?
To address CVE-2009-1003, you should update the affected versions of Oracle BEA Product Suite to the latest patched versions.
Which versions are affected by CVE-2009-1003?
CVE-2009-1003 impacts Oracle BEA Product Suite versions 9.0, 9.1, 9.2 MP3, 10.0 MP1, and 10.3.
Can CVE-2009-1003 be exploited remotely?
Yes, CVE-2009-1003 allows remote attackers to exploit the vulnerability through unspecified vectors.
What does CVE-2009-1003 allow attackers to do?
CVE-2009-1003 allows attackers to potentially access the source code of web pages, affecting integrity.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/oracle
- canonical/oracle bea product suite
- version/oracle bea product suite/9.1
- version/oracle bea product suite/10.0-mp1
- version/oracle bea product suite/9.0
- version/oracle bea product suite/10.3
- version/oracle bea product suite/9.2-mp3