CVE-2008-2576

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors.

CVSS v2.0 4.4 MEDIUM

4.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 3.4 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143	Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143	Broken Link
http://secunia.com/advisories/31087	Third Party Advisory
http://secunia.com/advisories/31113	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html	Broken Link
http://www.securitytracker.com/id?1020498	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/2109/references	Third Party Advisory
http://www.vupen.com/english/advisories/2008/2115	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43828	Third Party Advisory VDB Entry
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143	Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143	Broken Link
http://secunia.com/advisories/31087	Third Party Advisory
http://secunia.com/advisories/31113	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html	Broken Link
http://www.securitytracker.com/id?1020498	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/2109/references	Third Party Advisory
http://www.vupen.com/english/advisories/2008/2115	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43828	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:weblogic_server:8.1:sp6::::-::*
	cpe:2.3:a:oracle:weblogic_server:9.0:-::::-::*
	cpe:2.3:a:oracle:weblogic_server:9.1:-::::-::*
	cpe:2.3:a:oracle:weblogic_server:9.2:-::::-::*

History

No history.

Information

Published : 2008-07-15 23:41

Updated : 2025-04-09 00:30

NVD link : CVE-2008-2576

Mitre link : CVE-2008-2576

CVE.ORG link : CVE-2008-2576

JSON object : View

Products Affected

oracle

weblogic_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2008-2576", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.4, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-07-15T23:41:00.000", "references": [{"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31087", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31113", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1020498", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/2109/references", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/2115", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43828", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/31087", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/31113", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1020498", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/2109/references", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/2115", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43828", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors."}, {"lang": "es", "value": "Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite de Oracle versiones 9.2, 9.1, 9.0 y 8.1 SP6, presenta un impacto desconocido y vectores de ataque locales."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:weblogic_server:8.1:sp6:*:*:*:-:*:*", "vulnerable": true, "matchCriteriaId": "A99E15B3-455E-40E4-A98A-5A180C6E87C6"}, {"criteria": "cpe:2.3:a:oracle:weblogic_server:9.0:-:*:*:*:-:*:*", "vulnerable": true, "matchCriteriaId": "097579DE-AEC3-4A76-8E76-009677F75DE7"}, {"criteria": "cpe:2.3:a:oracle:weblogic_server:9.1:-:*:*:*:-:*:*", "vulnerable": true, "matchCriteriaId": "74431845-CEBF-423A-AD64-1DC177DB9282"}, {"criteria": "cpe:2.3:a:oracle:weblogic_server:9.2:-:*:*:*:-:*:*", "vulnerable": true, "matchCriteriaId": "B60784D4-7540-4D7B-9701-0FF6DF6FF122"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}