{"api_version":"1","generated_at":"2026-07-23T03:45:56+00:00","cve":"CVE-2008-4010","urls":{"html":"https://cve.report/CVE-2008-4010","api":"https://cve.report/api/cve/CVE-2008-4010.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-4010","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-4010"},"summary":{"title":"CVE-2008-4010","description":"Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to \"some NetUI tags.\"","state":"PUBLISHED","assigner":"oracle","published_at":"2008-10-14 21:11:11","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securitytracker.com/id?1021056","name":"http://www.securitytracker.com/id?1021056","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WebLogic Bugs Let Remote Users Execute Arbitary Code, Acces and Modify Information, and Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","name":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Critical Patch Update Advisory - October 2008","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html","name":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2008/2825","name":"http://www.vupen.com/english/advisories/2008/2825","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32302","name":"http://secunia.com/advisories/32302","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"BEA WebLogic Workshop NetUI Tags Information Disclosure Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45909","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45909","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4010","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4010","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"4010","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"10.0","cpe7":"mp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4010","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"10.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4010","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"10.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4010","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"8.1","cpe7":"sp6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4010","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"9.2","cpe7":"mp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T10:00:42.147Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html"},{"name":"oracle-workshop-tags-unauth-access(45909)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45909"},{"name":"1021056","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021056"},{"name":"32302","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32302"},{"name":"ADV-2008-2825","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2825"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-10-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to \"some NetUI tags.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html"},{"name":"oracle-workshop-tags-unauth-access(45909)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45909"},{"name":"1021056","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021056"},{"name":"32302","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32302"},{"name":"ADV-2008-2825","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2825"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2008-4010","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to \"some NetUI tags.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html","refsource":"CONFIRM","url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html"},{"name":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html"},{"name":"oracle-workshop-tags-unauth-access(45909)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45909"},{"name":"1021056","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021056"},{"name":"32302","refsource":"SECUNIA","url":"http://secunia.com/advisories/32302"},{"name":"ADV-2008-2825","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2825"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2008-4010","datePublished":"2008-10-14T21:00:00.000Z","dateReserved":"2008-09-09T00:00:00.000Z","dateUpdated":"2024-08-07T10:00:42.147Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-10-14 21:11:11","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.2:*:*:*:*:*:*:*","matchCriteriaId":"47D631E9-C2EE-4A63-AA5F-DEDBA5649BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"4010","Ordinal":"1","Title":"CVE-2008-4010","CVE":"CVE-2008-4010","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"4010","Ordinal":"1","NoteData":"Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to \"some NetUI tags.\"","Type":"Description","Title":"CVE-2008-4010"},{"CveYear":"2008","CveId":"4010","Ordinal":"2","NoteData":"2008-10-14","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"4010","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}