CVE-2008-5457

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 61.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-01-14 · updated 2026-06-16

Description

Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected products

Oracle Bea Product Suite: 7.0-sp7, 8.1-sp6, 9.0, 9.1, 9.2-mp3, 10.0-mp1 (+1)

References

http://secunia.com/advisories/33526
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/bid/33177
http://www.securitytracker.com/id?1021571
http://www.vupen.com/english/advisories/2009/0115
http://secunia.com/advisories/33526
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/bid/33177
http://www.securitytracker.com/id?1021571
http://www.vupen.com/english/advisories/2009/0115

Get alerted when CVE-2008-5457 or the next vulnerability affects your stack