CVE-2008-4010

critical

Description

Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI tags."

References

https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/45909

http://www.vupen.com/english/advisories/2008/2825

http://www.securitytracker.com/id?1021056

http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html

http://secunia.com/advisories/32302

Details

Source: Mitre, NVD

Published: 2008-10-14

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00955