{"api_version":"1","generated_at":"2026-07-23T03:41:31+00:00","cve":"CVE-2011-2320","urls":{"html":"https://cve.report/CVE-2011-2320","api":"https://cve.report/api/cve/CVE-2011-2320.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-2320","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-2320"},"summary":{"title":"CVE-2011-2320","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.","state":"PUBLISHED","assigner":"oracle","published_at":"2011-10-18 22:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://osvdb.org/76492","name":"http://osvdb.org/76492","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html","name":"http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update - October 2011","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/50198","name":"http://www.securityfocus.com/bid/50198","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Fusion Middleware CVE-2011-2320 Remote WebLogic Server Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2320","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2320","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"2320","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"10.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2320","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"10.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2320","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"10.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2320","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"10.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2320","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"9.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:00:33.225Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"76492","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/76492"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html"},{"name":"50198","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/50198"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-10-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-12-15T10:00:00.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"76492","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/76492"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html"},{"name":"50198","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/50198"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2011-2320","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"76492","refsource":"OSVDB","url":"http://osvdb.org/76492"},{"name":"http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html"},{"name":"50198","refsource":"BID","url":"http://www.securityfocus.com/bid/50198"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2011-2320","datePublished":"2011-10-18T22:00:00.000Z","dateReserved":"2011-06-02T00:00:00.000Z","dateUpdated":"2024-08-06T23:00:33.225Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-10-18 22:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A70B39C4-DA43-4635-BF95-6FA9780B4F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"66F77B48-8DD3-4067-96CF-F7F8A92E03AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"93EFBC67-F1C0-4256-BB08-17A3BCFE9CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E33CE0C3-CD50-4E81-B17E-C71977199F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"DCFB9A54-A10A-4D54-BA6C-C0BC1BC67E45"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"2320","Ordinal":"1","Title":"CVE-2011-2320","CVE":"CVE-2011-2320","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"2320","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.","Type":"Description","Title":"CVE-2011-2320"},{"CveYear":"2011","CveId":"2320","Ordinal":"2","NoteData":"2011-10-18","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"2320","Ordinal":"3","NoteData":"2011-12-15","Type":"Other","Title":"Modified"}]}}}