CVE-2010-2375: Bea WebLogic Server

Medium severity, CVSS 6.4. EPSS: 6.5% chance of exploitation in the next 30 days.

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.

Affected products

• Bea WebLogic Server: version 7.0 only; version 8.1 only; version 9.0 only; version 9.1 only; version 9.2 only
• Bea Systems WebLogic Server: version 10.0 only
• Oracle WebLogic Server: version 10.3.2.0.0 only; version 10.3.3.0.0 only

Published 2010-07-13. Last modified 2026-06-16.