CVE-2010-4437

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 6.9%

from disclosure to weapon51 days

Published on NVDJan 19

1st PoC+51d

exploitation probability

6.9%top 7% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16959unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/70571 http://secunia.com/advisories/42975 http://securityreason.com/securityalert/8126 https://exchange.xforce.ibmcloud.com/vulnerabilities/64764 http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html http://www.securityfocus.com/bid/45852 http://www.securitytracker.com/id?1024981 http://www.vupen.com/english/advisories/2011/0143