Oracle WebLogic Portal CVE-2009-2002 Remote Unspecified Vulnerability

Bugtraq ID:	36774
Class:	Unknown
CVE:	CVE-2009-2002
Remote:	Yes
Local:	No
Published:	Oct 20 2009 12:00AM
Updated:	Oct 21 2009 01:38AM
Credit:	Oracle
Vulnerable:	BEA Systems WebLogic Portal 10.3.1 BEA Systems WebLogic Portal 8.1 SP6 BEA Systems WebLogic Portal 8.1 SP5 BEA Systems WebLogic Portal 8.1 SP4 BEA Systems WebLogic Portal 8.1 SP3 BEA Systems WebLogic Portal 8.1 SP2 BEA Systems WebLogic Portal 8.1 SP1 BEA Systems WebLogic Portal 9.2 MP3 BEA Systems WebLogic Portal 9.2 BEA Systems WebLogic Portal 10.3 BEA Systems WebLogic Portal 10.2.MP1 BEA Systems WebLogic Portal 10.2 BEA Systems WebLogic Portal 10.0 MP1 BEA Systems WebLogic Portal 10.0
Not Vulnerable:

Oracle WebLogic Portal CVE-2009-2002 Remote Unspecified Vulnerability

Oracle WebLogic Portal is prone to a remote vulnerability.

The vulnerability can be exploited over the 'HTTP' protocol. An attacker doesn't need specific privileges to exploit this vulnerability.

This vulnerability affects the following supported versions:

8.1.6
9.2.3
10.0.1
10.2.1
10.3.1.0.0

Oracle WebLogic Portal CVE-2009-2002 Remote Unspecified Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle WebLogic Portal CVE-2009-2002 Remote Unspecified Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for details.

Oracle WebLogic Portal CVE-2009-2002 Remote Unspecified Vulnerability

References:

• Oracle Critical Patch Update Advisory - October 2009 (Oracle)