Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability

Bugtraq ID:	45877
Class:	Unknown
CVE:	CVE-2010-4453
Remote:	Yes
Local:	No
Published:	Jan 18 2011 12:00AM
Updated:	Jan 18 2011 12:00AM
Credit:	Oracle
Vulnerable:	Oracle Weblogic Server 10.3.3 Oracle Weblogic Server 10.3.2 Oracle Weblogic Server 10.3.1 Oracle Weblogic Server 9.2.4 Oracle Weblogic Server 9.2 MP3 Oracle Weblogic Server 9.2 MP2 Oracle Weblogic Server 9.2 MP1 Oracle Weblogic Server 9.2 Oracle Weblogic Server 9.1 GA Oracle Weblogic Server 9.1 Oracle Weblogic Server 9.0 GA Oracle Weblogic Server 8.1 SP6 Oracle Weblogic Server 8.1 MP6 Oracle Weblogic Server 8.1 MP4 Oracle Weblogic Server 8.1 Oracle Weblogic Server 7.0 SP7 Oracle Weblogic Server 7.0 MP5 Oracle Weblogic Server 7.0 MP4 Oracle Weblogic Server 7.0 MP2 Oracle Weblogic Server 7.0 Oracle Weblogic Server 10.3 Oracle Weblogic Server 10.1 Oracle Weblogic Server 10.0 MP2 Oracle Weblogic Server 10.0 MP1 Oracle Weblogic Server 10
Not Vulnerable:

Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability

Oracle Fusion Middleware is prone to a remote vulnerability in Oracle WebLogic Server.

The vulnerability can be exploited over the 'HTTP' protocol. The 'Servlet Container' sub component is affected.

This vulnerability affects the following supported versions:
7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3

Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability

References:

• Oracle Critical Patch Update Advisory - January 2011 (Oracle)