CVE-2009-1974

critical

Description

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/51758

http://www.vupen.com/english/advisories/2009/1900

http://www.securitytracker.com/id?1022561

http://www.securityfocus.com/bid/35674

http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html

http://secunia.com/advisories/35776

http://osvdb.org/55906

Details

Source: Mitre, NVD

Published: 2009-07-14

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00955