← Vulnerability feed

Vulnerability record · CVE-2008-5461 · published 14 January 2009

CVE-2008-5461: Oracle bea product suite information exposure vulnerability

Oracle · Bea Product Suite

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, and availability, related to WLS. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is cross-site scripting.

6.8 CVSS 2.0 Medium EPSS 1.4% · top 28.0% CWE-200 · Information exposureCWE-264 · Permissions and access controls
6.8CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, and availability, related to WLS. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is cross-site scripting.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://jvn.jp/en/jp/JVN93431860/index.html
http://secunia.com/advisories/33526 Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/bid/33177
http://www.securitytracker.com/id?1021571
http://www.vupen.com/english/advisories/2009/0115 Vendor Advisory
http://jvn.jp/en/jp/JVN93431860/index.html
http://secunia.com/advisories/33526 Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/bid/33177
http://www.securitytracker.com/id?1021571
http://www.vupen.com/english/advisories/2009/0115 Vendor Advisory

Track CVE-2008-5461 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-0079Oracle bea product suite vulnerabilityMultiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remote attackers to affect confide…EPSS 3.1%10.0CVE-2009-3403Oracle bea product suite vulnerabilityUnspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect conf…EPSS 3.1%10.0CVE-2009-1012Oracle bea product suite vulnerabilityUnspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.…EPSS 3.9%10.0CVE-2008-5457Oracle BEA WebLogic Server Plugins unspecified remote vulnerabilityAn unspecified vulnerability exists in the Oracle BEA WebLogic Server Plugins component for Apache, Sun and IIS web servers within BEA Product Suite …EPSS 61%analysed10.0CVE-2008-4008WebLogic Apache Connector stack buffer overflow in BEA Product SuiteAn unspecified vulnerability in the WebLogic Server Plugins for Apache component of BEA Product Suite (versions 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.…EPSS 56%analysed8.5CVE-2009-1016Oracle bea product suite vulnerabilityUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote…EPSS 2.0%6.8CVE-2009-1974Oracle bea product suite vulnerabilityUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote…EPSS 1.5%6.8CVE-2009-1975Oracle bea product suite vulnerabilityUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, an…EPSS 2.7%

Source: NIST National Vulnerability Database (record CVE-2008-5461), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.