{"api_version":"1","generated_at":"2026-07-23T15:27:50+00:00","cve":"CVE-2010-4437","urls":{"html":"https://cve.report/CVE-2010-4437","api":"https://cve.report/api/cve/CVE-2010-4437.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-4437","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4437"},"summary":{"title":"CVE-2010-4437","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","state":"PUBLISHED","assigner":"oracle","published_at":"2011-01-19 17:00:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/42975","name":"http://secunia.com/advisories/42975","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle WebLogic Server Three Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/70571","name":"http://osvdb.org/70571","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/8126","name":"http://securityreason.com/securityalert/8126","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CXSecurity - IDS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024981","name":"http://www.securitytracker.com/id?1024981","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: Oracle Fusion Middleware Flaws Let Remote Users Execute Arbitrary Code, Access and Modify Data, and Deny Service","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0143","name":"http://www.vupen.com/english/advisories/2011/0143","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/45852","name":"http://www.securityfocus.com/bid/45852","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Weblogic CVE-2010-4437 Remote Session Fixation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html","name":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update Pre-Release Announcement - January   2011","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64764","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64764","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4437","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4437","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"4437","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"10.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4437","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"10.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4437","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"10.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4437","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4437","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4437","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"9.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:43:14.907Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2011-0143","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0143"},{"name":"70571","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/70571"},{"name":"1024981","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024981"},{"name":"weblogic-servlet-container-unspec(64764)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64764"},{"name":"45852","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45852"},{"name":"42975","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42975"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html"},{"name":"8126","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/8126"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-01-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"ADV-2011-0143","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0143"},{"name":"70571","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/70571"},{"name":"1024981","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024981"},{"name":"weblogic-servlet-container-unspec(64764)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64764"},{"name":"45852","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45852"},{"name":"42975","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42975"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html"},{"name":"8126","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/8126"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2010-4437","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2011-0143","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0143"},{"name":"70571","refsource":"OSVDB","url":"http://osvdb.org/70571"},{"name":"1024981","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024981"},{"name":"weblogic-servlet-container-unspec(64764)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64764"},{"name":"45852","refsource":"BID","url":"http://www.securityfocus.com/bid/45852"},{"name":"42975","refsource":"SECUNIA","url":"http://secunia.com/advisories/42975"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html"},{"name":"8126","refsource":"SREASON","url":"http://securityreason.com/securityalert/8126"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2010-4437","datePublished":"2011-01-19T16:00:00.000Z","dateReserved":"2010-12-06T00:00:00.000Z","dateUpdated":"2024-08-07T03:43:14.907Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-01-19 17:00:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:9.0:*:*:*:*:*:*:*","matchCriteriaId":"1772787A-DA11-413E-8B82-93074C325EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:9.1:*:*:*:*:*:*:*","matchCriteriaId":"BA7DFF34-F1BC-4CB1-8D68-CDEAC454F856"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A70B39C4-DA43-4635-BF95-6FA9780B4F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"66F77B48-8DD3-4067-96CF-F7F8A92E03AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"17575FE2-9B9B-434A-AD6B-8FFACB73A30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"93EFBC67-F1C0-4256-BB08-17A3BCFE9CE2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"4437","Ordinal":"1","Title":"CVE-2010-4437","CVE":"CVE-2010-4437","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"4437","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","Type":"Description","Title":"CVE-2010-4437"},{"CveYear":"2010","CveId":"4437","Ordinal":"2","NoteData":"2011-01-19","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"4437","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}