CVE-2009-1008

MEDIUM 4.4CVE-2009-1008 · Published 15/04/2009 · updated 16/06/2026

In short

CVE-2009-1008 is a MEDIUM (CVSS 4.4) vulnerability affecting websphere portal (ibm), application server (oracle).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
websphere portal ibm	`= 6.0.0.0= 6.0.1.0= 6.1.0.0= 6.1.5.0= 7.0.0.0= 8.0.0.0`	No fix yet
application server oracle	`= 8.2.2= 8.3.0`	No fix yet

Description

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1010.

References

osvdb.org/53747 · Broken Link
secunia.com/advisories/34693 · Permissions Required
www-01.ibm.com/support/docview.wss · Third Party Advisory
oracle.com/technetwork/topics/security/cpuapr2009-099563.html · Third Party Advisory
securityfocus.com/bid/34461 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
us-cert.gov/cas/techalerts/TA09-105A.html · Third Party Advisory

More vulnerabilities in websphere portal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

websphere portal

ibm

= 6.0.0.0= 6.0.1.0= 6.1.0.0= 6.1.5.0= 7.0.0.0= 8.0.0.0

No fix yet

application server

oracle

= 8.2.2= 8.3.0

No fix yet

More vulnerabilities in websphere portal

See all →