RETIRED: Oracle Complex Event Processing CVE-2009-1523 Remote Vulnerability

Bugtraq ID:	35675
Class:	Unknown
CVE:	CVE-2009-1523
Remote:	Yes
Local:	No
Published:	Jul 14 2009 12:00AM
Updated:	Jul 15 2009 05:46PM
Credit:	Oracle
Vulnerable:	Oracle WebLogic Event Server 2.0 Oracle Complex Event Processing 10.3
Not Vulnerable:

RETIRED: Oracle Complex Event Processing CVE-2009-1523 Remote Vulnerability

Oracle Complex Event Processing is prone to a remote vulnerability that can be exploited over the 'HTTP' protocol. A successful exploit can occur if the attacker has 'Jetty Server Package' privileges.

This vulnerability affects the following supported versions:

Complex Event Processing 10.3
WebLogic Event Server (EVS) 2.0

NOTE: This BID has been retired because it is a duplicate of BID 34800 (Jetty Cross Site Scripting and Information Disclosure Vulnerabilities).

RETIRED: Oracle Complex Event Processing CVE-2009-1523 Remote Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Oracle Complex Event Processing CVE-2009-1523 Remote Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for details.

RETIRED: Oracle Complex Event Processing CVE-2009-1523 Remote Vulnerability

References:

• Complex Event Processing Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2009 (Oracle)