{"api_version":"1","generated_at":"2026-07-23T06:05:26+00:00","cve":"CVE-2008-5462","urls":{"html":"https://cve.report/CVE-2008-5462","api":"https://cve.report/api/cve/CVE-2008-5462.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-5462","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-5462"},"summary":{"title":"CVE-2008-5462","description":"Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","state":"PUBLISHED","assigner":"oracle","published_at":"2009-01-14 02:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","name":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Critical Patch Update Advisory - January 2009","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021571","name":"http://www.securitytracker.com/id?1021571","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WebLogic Bugs Let Remote Users Execute Arbitary Code, Acces and Modify Information, and Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/33177","name":"http://www.securityfocus.com/bid/33177","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle January 2009 Critical Patch Update Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2009/0115","name":"http://www.vupen.com/english/advisories/2009/0115","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5462","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5462","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"5462","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"10.0","cpe7":"mp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5462","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"10.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5462","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"10.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5462","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"8.1","cpe7":"sp6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5462","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"9.2","cpe7":"mp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T10:56:46.913Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2009-0115","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/0115"},{"name":"1021571","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021571"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html"},{"name":"33177","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33177"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-01-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-01-24T10:00:00.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"ADV-2009-0115","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/0115"},{"name":"1021571","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021571"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html"},{"name":"33177","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33177"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2008-5462","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2009-0115","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/0115"},{"name":"1021571","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021571"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html"},{"name":"33177","refsource":"BID","url":"http://www.securityfocus.com/bid/33177"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2008-5462","datePublished":"2009-01-14T02:00:00.000Z","dateReserved":"2008-12-11T00:00:00.000Z","dateUpdated":"2024-08-07T10:56:46.913Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-01-14 02:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.2:*:*:*:*:*:*:*","matchCriteriaId":"47D631E9-C2EE-4A63-AA5F-DEDBA5649BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"5462","Ordinal":"1","Title":"CVE-2008-5462","CVE":"CVE-2008-5462","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"5462","Ordinal":"1","NoteData":"Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","Type":"Description","Title":"CVE-2008-5462"},{"CveYear":"2008","CveId":"5462","Ordinal":"2","NoteData":"2009-01-13","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"5462","Ordinal":"3","NoteData":"2009-01-24","Type":"Other","Title":"Modified"}]}}}