CVE-2010-0073: Critical severity ORACLE WebLogic Server vulnerability

Published Apr 14, 2010

Updated

Unspecified vulnerability in the WebLogic Server in Oracle WebLogic Server 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, and 10.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

7 affected components

ORACLE WebLogic Server=7.0-sp7

ORACLE WebLogic Server=8.1-sp6

ORACLE WebLogic Server=9.0

ORACLE WebLogic Server=9.1

ORACLE WebLogic Server=9.2-maintenance_pack3

ORACLE WebLogic Server=10.0-maintenance_pack2

ORACLE WebLogic Server=10.3.2.0.0

Remediation

Patch Available

http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html

Event History

Apr 14, 2010

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0073?

CVE-2010-0073 is classified as a critical vulnerability that can affect confidentiality, integrity, and availability.

Which versions of Oracle WebLogic Server are affected by CVE-2010-0073?

CVE-2010-0073 affects Oracle WebLogic Server versions 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, and 10.3.2.

How do I fix CVE-2010-0073?

To mitigate CVE-2010-0073, you should upgrade to a patched version of Oracle WebLogic Server as specified by Oracle.

Can CVE-2010-0073 be exploited remotely?

Yes, CVE-2010-0073 allows remote attackers to exploit the vulnerability through unknown vectors.

What type of issues does CVE-2010-0073 pose to my application?

CVE-2010-0073 poses serious risks to confidentiality, integrity, and availability of applications using the affected versions of WebLogic Server.