TI-2009-03242 Aliases CVE-2009-3403 GHSA-9r76-mhm8-f3q4

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK…

MEDIUM 48Published 2009-10-22 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Complete · Complete · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this issue subsumes CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, and CVE-2009-2676.

Why it matters now

EPSS 0.03063 87th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:oracle:bea_product_suite:r27.6.4:::::::*	r27.6.4	Vulnerable	Oracle

cpe:2.3:a:oracle:bea_product_suite:r27.6.4:*:*:*:*:*:*:* Versions r27.6.4 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2009-3403
2026-10-03 Alias added: GHSA-9r76-mhm8-f3q4

References

Advisory 1

TA09-294A

Other 1

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html

TI-2008-05196 Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and… CVSS 2.0HIGH 10.0
TI-2008-03847 Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA… CVSS 2.0HIGH 10.0
TI-2009-00966 Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA… CVSS 2.0HIGH 10.0
TI-2010-00078 Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using… CVSS 2.0HIGH 10.0
TI-2009-00970 Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3… CVSS 2.0HIGH 8.5
TI-2009-01883 Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3… CVSS 2.0MEDIUM 6.8

See all 31 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences