CVE-2010-0069: Medium severity oracle multiple products vulnerability

Published Jan 13, 2010

Updated

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors.

Affected Software

8 affected components

Oracle BEA Product Suite=10.3.0

Oracle BEA Product Suite=7.0

Oracle BEA Product Suite=9.1

Oracle BEA Product Suite=8.1-sp6

Oracle BEA Product Suite=10.0-mp1

Oracle BEA Product Suite=7.0-sp7

Oracle BEA Product Suite=9.0

Oracle BEA Product Suite=9.2-mp3

Remediation

Patch Available

http://www.us-cert.gov/cas/techalerts/TA10-012A.html

Event History

Jan 13, 2010

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2010-0069?

CVE-2010-0069 has a severity rating that suggests it poses a significant risk, affecting the integrity of the WebLogic Server component.

How do I fix CVE-2010-0069?

To fix CVE-2010-0069, it is recommended to apply the latest security patches provided by Oracle for affected versions of the BEA Product Suite.

Which versions are affected by CVE-2010-0069?

CVE-2010-0069 affects Oracle BEA Product Suite versions 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP1, and 10.3.0.

What systems are vulnerable to CVE-2010-0069?

Systems running the affected versions of Oracle BEA Product Suite are vulnerable to CVE-2010-0069 and may allow remote attackers to compromise integrity.

Is CVE-2010-0069 being actively exploited?

There is no public indication that CVE-2010-0069 is actively being exploited, but the vulnerability should still be remediated promptly.