CVE-2009-1974
First published: Tue Jul 14 2009(Updated: )
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Multiple Products | =7.0-sp7 | |
| Oracle Multiple Products | =8.1-sp6 | |
| Oracle Multiple Products | =9.0 | |
| Oracle Multiple Products | =9.1 | |
| Oracle Multiple Products | =9.2-mp3 | |
| Oracle Multiple Products | =10.0-mp1 | |
| Oracle Multiple Products | =10.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/55906
- http://secunia.com/advisories/35776
- http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
- http://www.securityfocus.com/bid/35674
- http://www.securitytracker.com/id?1022561
- http://www.vupen.com/english/advisories/2009/1900
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51758
Frequently Asked Questions
What is the severity of CVE-2009-1974?
CVE-2009-1974 is considered to have a high severity due to its potential impact on confidentiality, integrity, and availability.
How do I fix CVE-2009-1974?
To fix CVE-2009-1974, it is recommended to apply the latest patches provided by Oracle for affected versions of the BEA Product Suite.
What versions of Oracle BEA Product Suite are affected by CVE-2009-1974?
CVE-2009-1974 affects Oracle BEA Product Suite versions 7.0 SP7 through 10.3, including multiple sub-releases.
Can CVE-2009-1974 be exploited remotely?
Yes, CVE-2009-1974 can be exploited by remote attackers, posing a significant risk to services utilizing affected versions.
What are the implications of CVE-2009-1974 on my system?
Exploitation of CVE-2009-1974 can lead to unauthorized access, data breaches, and potential disruption of service.
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/oracle
- canonical/oracle multiple products
- version/oracle multiple products/7.0-sp7
- version/oracle multiple products/8.1-sp6
- version/oracle multiple products/9.0
- version/oracle multiple products/9.1
- version/oracle multiple products/9.2-mp3
- version/oracle multiple products/10.0-mp1
- version/oracle multiple products/10.3