CVE-2010-4437 describes an unspecified vulnerability within the Servlet Container component of Oracle WebLogic Server, impacting Oracle Fusion Middleware versions 9.0 through 10.3.3. This medium-severity vulnerability, with a CVSS score of 5.8, allows remote attackers to compromise confidentiality and integrity without authentication, though it requires medium attack complexity. While there is no evidence of active exploitation, a public exploit for POST Session Fixation exists on ExploitDB, indicating potential for abuse. Despite its age and high FAUCET risk score, there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.0CPE matchmatch criteria | cpe:2.3:a:oracle:fusion_middleware:9.0:*:*:*:*:*:*:* | ||
9.1CPE matchmatch criteria | cpe:2.3:a:oracle:fusion_middleware:9.1:*:*:*:*:*:*:* | ||
9.2.4CPE matchmatch criteria | cpe:2.3:a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:* | ||
10.0.2CPE matchmatch criteria | cpe:2.3:a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:* | ||
10.3.2CPE matchmatch criteria | cpe:2.3:a:oracle:fusion_middleware:10.3.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.