{"id":"CVE-2010-4437","aliases":["EUVD-2010-4406","GHSA-fj6x-fvp6-8xpx"],"status":"published","title":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0...","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06867,"percentile":0.94095,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2011-01-19T16:00:00Z","modified":"2026-06-16T23:24:47Z","exploits":[{"source":"exploitdb","id":"EDB-16959","title":"Oracle WebLogic - POST Session Fixation","type":"webapps","platform":"multiple","date":"2011-03-11","url":"https://www.exploit-db.com/exploits/16959"}],"products":[{"vendor":"oracle","product":"fusion_middleware"}],"references":[{"url":"http://www.vupen.com/english/advisories/2011/0143","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://osvdb.org/70571","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securitytracker.com/id?1024981","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64764","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/45852","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/42975","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8126","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4437"},{"url":"https://github.com/advisories/GHSA-fj6x-fvp6-8xpx"}],"sources":{"cve":[{"id":"CVE-2010-4437","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","status":"published","published":"2011-01-19T16:00:00Z","modified":"2024-08-07T03:43:14.907Z","updated_at":"2026-11-02T14:33:28.858903Z"}],"euvd":[{"id":"EUVD-2010-4406","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","status":"published","published":"2011-01-19T16:00:00Z","modified":"2024-08-07T03:43:14Z","updated_at":"2026-11-03T01:39:30.501544Z"}],"ghsa":[{"id":"GHSA-fj6x-fvp6-8xpx","title":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0...","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","status":"published","published":"2022-05-17T02:04:07Z","modified":"2023-01-27T05:01:06Z","updated_at":"2026-11-02T14:41:49.063625Z"}],"nvd":[{"id":"CVE-2010-4437","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.","status":"published","published":"2011-01-19T17:00:02.203Z","modified":"2026-06-16T23:24:47.427Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:03.297831Z"}]}}