CVE-2010-4437 EXPLOIT
5.8
MEDIUM · CVSS 2.0 · EPSS 6.9% (pctl 94)
Patch early
A public exploit exists.
Description
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.
Scoring
| CVSS | 5.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:N |
| EPSS | 6.87% — more likely to be exploited than 94% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-01-19 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| oracle | fusion middleware |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Oracle WebLogic - POST Session Fixation | 2011-03-11 |
References
- http://osvdb.org/70571
- http://secunia.com/advisories/42975
- http://securityreason.com/securityalert/8126
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
- http://www.securityfocus.com/bid/45852
- http://www.securitytracker.com/id?1024981
- http://www.vupen.com/english/advisories/2011/0143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64764
- http://osvdb.org/70571
- http://secunia.com/advisories/42975
- http://securityreason.com/securityalert/8126
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
- http://www.securityfocus.com/bid/45852
- http://www.securitytracker.com/id?1024981
- http://www.vupen.com/english/advisories/2011/0143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64764
→ the Explorer · watch your stack · NVD