CVE-2008-5457 Other in n/a

Critical 10.0 Published 14 Jan 2009 Updated 7 Aug 2024

Remote attackers can compromise confidentiality, integrity, and availability of WebLogic Server plugins via unspecified vectors.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2008-5457?

CVE-2008-5457 is a critical vulnerability in n/a, published on 14 Jan 2009. It can be exploited over the network.

Official description

Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Which versions are affected by CVE-2008-5457?

It affects 1 product.

Products include Oracle Bea Product Suite.

How do I fix CVE-2008-5457?

No fix has been published for CVE-2008-5457 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-5457 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-5457 exists.

Public exploit code: 1 Metasploit module and 2 Exploit-DB entries.

Sources

Also known as GHSA-g2rx-86cx-wmmj.