Severity: : Medium
  CVE Kennungen: : CVE-2009-1975
  Advisory Date: 21 lipca 2015

  DESCRIPTION

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003635
  Trend Micro Deep Security DPI Rule Name: 1003635 - Oracle BEA Weblogic Server console-help.portal Cross-Site Scripting

  AFFECTED SOFTWARE AND VERSION:

  • oracle bea_product_suite 10.3