CVE-2008-2581
Summary
| CVE | CVE-2008-2581 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-07-15 23:41:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer. |
Risk And Classification
Primary CVSS: v2.0 5.1 from [email protected]
AV:N/AC:H/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:H/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Bea Product Suite | 10.0 | mp1 | All | All |
| Application | Oracle | Bea Product Suite | 7.0 | sp7 | All | All |
| Application | Oracle | Bea Product Suite | 8.1 | sp6 | All | All |
| Application | Oracle | Bea Product Suite | 9.0 | All | All | All |
| Application | Oracle | Bea Product Suite | 9.1 | All | All | All |
| Application | Oracle | Bea Product Suite | 9.2 | mp3 | All | All |
| Application | Oracle | Weblogic Server Component | 10.0 | mp1 | All | All |
| Application | Oracle | Weblogic Server Component | 7.0 | sp7 | All | All |
| Application | Oracle | Weblogic Server Component | 8.1 | sp6 | All | All |
| Application | Oracle | Weblogic Server Component | 9.0 | All | All | All |
| Application | Oracle | Weblogic Server Component | 9.1 | All | All | All |
| Application | Oracle | Weblogic Server Component | 9.2 | mp3 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| Oracle Critical Patch Update Advisory - July 2008 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | |
| SecurityTracker.com Archives - Oracle WebLogic Server Bugs Let Remote Users Access and Modify Data and Cause Denial of Service Conditions | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| HPSBMA02133 SSRT061201 rev.9 - HP Oracle for OpenView (OfO) Critical Patch Update - c00727143 - HP Business Support Center | af854a3a-2127-422b-91ae-364da2661108 | h20000.www2.hp.com | |
| Oracle Products Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| HP Oracle for OpenView Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.