{"api_version":"1","generated_at":"2026-07-24T19:36:42+00:00","cve":"CVE-2009-1005","urls":{"html":"https://cve.report/CVE-2009-1005","api":"https://cve.report/api/cve/CVE-2009-1005.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-1005","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-1005"},"summary":{"title":"CVE-2009-1005","description":"Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors.","state":"PUBLISHED","assigner":"oracle","published_at":"2009-04-15 10:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.1","severity":"","vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:P/A:P","baseScore":4.1,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securitytracker.com/id?1022059","name":"http://www.securitytracker.com/id?1022059","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle WebLogic Server and Portal Bugs Let Remote Users Access and Modify Data and Cause Denial of Service Conditions - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","name":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA09-105A -- Oracle Updates for Multiple Vulnerabilities","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/34461","name":"http://www.securityfocus.com/bid/34461","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle April 2009 Critical Patch Update Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/53760","name":"http://osvdb.org/53760","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","name":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Critical Patch Update Advisory - April 2009","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html","name":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Page not found | Oracle","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1005","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1005","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"1005","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"10.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1005","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1005","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"3.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1005","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"bea_product_suite","cpe6":"3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T04:57:17.551Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1022059","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1022059"},{"name":"34461","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/34461"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html"},{"name":"TA09-105A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html"},{"name":"53760","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/53760"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-04-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-04-18T09:00:00.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"1022059","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1022059"},{"name":"34461","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/34461"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html"},{"name":"TA09-105A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html"},{"name":"53760","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/53760"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2009-1005","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1022059","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1022059"},{"name":"34461","refsource":"BID","url":"http://www.securityfocus.com/bid/34461"},{"name":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html","refsource":"CONFIRM","url":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html"},{"name":"TA09-105A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html"},{"name":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html"},{"name":"53760","refsource":"OSVDB","url":"http://osvdb.org/53760"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2009-1005","datePublished":"2009-04-15T10:00:00.000Z","dateReserved":"2009-03-19T00:00:00.000Z","dateUpdated":"2024-08-07T04:57:17.551Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-04-15 10:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:P/A:P","baseScore":4.1,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AC96C53F-BBC4-44F2-8CCC-5C1AD4E0AC0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CDB55BA2-802E-4942-B641-8FC9B27FFAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:3.2:*:*:*:*:*:*:*","matchCriteriaId":"6F158161-3AAD-4F0A-9E8C-9D4669787317"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0405C95B-CADF-4806-8ED1-D20575F4179B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"1005","Ordinal":"1","Title":"CVE-2009-1005","CVE":"CVE-2009-1005","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"1005","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors.","Type":"Description","Title":"CVE-2009-1005"},{"CveYear":"2009","CveId":"1005","Ordinal":"2","NoteData":"2009-04-15","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"1005","Ordinal":"3","NoteData":"2009-04-18","Type":"Other","Title":"Modified"}]}}}