Oracle WebLogic Server Component vulnerabilities

4 CVEs affecting Oracle WebLogic Server Component, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0217, published 2009-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0217, published 2009-07-14. Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days. The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server…
CVE-2008-2582, published 2008-07-15. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors.
CVE-2008-2580, published 2008-07-15. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors.
CVE-2008-2581, published 2008-07-15. Medium severity, CVSS 5.1. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI…