4.4

CVE-2009-1008

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1010.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Portal Version6.0.0.0
Ibm ≫ Websphere Portal Version6.0.1.0
Ibm ≫ Websphere Portal Version6.1.0.0
Ibm ≫ Websphere Portal Version6.1.5.0
Ibm ≫ Websphere Portal Version7.0.0.0
Ibm ≫ Websphere Portal Version8.0.0.0
Oracle ≫ Application Server Version8.2.2
Oracle ≫ Application Server Version8.3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.334
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/34693
Permissions Required
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
Third Party Advisory
http://www.securityfocus.com/bid/34461
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
Third Party Advisory
US Government Resource
http://www.securitytracker.com/id?1022055
Third Party Advisory
VDB Entry
http://osvdb.org/53747
Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21660640
Third Party Advisory