CVE-2008-4009: oracle bea product suite – CVSS 5.1 · Watchpost