Oracle Bea Product Suite vulnerabilities

32 CVEs affecting Oracle Bea Product Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0079, published 2010-01-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-5457, published 2009-01-14. High severity, CVSS 10.0. EPSS: 61.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows…
CVE-2008-4008, published 2008-10-14. High severity, CVSS 10.0. EPSS: 56.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect…
CVE-2009-0217, published 2009-07-14. Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days. The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server…
CVE-2009-1012, published 2009-04-15. High severity, CVSS 10.0. EPSS: 3.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through…
CVE-2010-0079, published 2010-01-13. High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2009-3403, published 2009-10-22. High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2009-1975, published 2009-07-14. Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.
CVE-2010-0068, published 2010-01-13. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2009-3399, published 2009-10-22. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, related to WLS Console.
CVE-2009-3396, published 2009-10-22. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to affect integrity, related to WLS Console.

Latest

CVE-2010-0078, published 2010-01-13. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors.
CVE-2010-0074, published 2010-01-13. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown…
CVE-2010-0069, published 2010-01-13. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors.
CVE-2009-2002, published 2009-10-22. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.