CVE-2011-2320
Status: ModifiedMedium (5)—
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Base score: 5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.99%
- Percentile among all scored CVEs: 80
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-noinfo
References
Raw JSON (NVD)
Show
{
"id": "CVE-2011-2320",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert_us@oracle.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-10-18T22:55:02.887",
"references": [
{
"url": "http://osvdb.org/76492",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html",
"tags": [
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.securityfocus.com/bid/50198",
"source": "secalert_us@oracle.com"
},
{
"url": "http://osvdb.org/76492",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/50198",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el componente Oracle WebLogic Server de Oracle Fusion Middleware v9.2.4.0, v10.0.2.0, v10.3.3.0, v10.3.4.0 y v10.3.5.0 permite a atacantes remotos comprometer la confidencialidad a través de vectores desconocidos relacionados con Web Services."
}
],
"lastModified": "2026-06-16T23:31:06.453",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A70B39C4-DA43-4635-BF95-6FA9780B4F32"
},
{
"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66F77B48-8DD3-4067-96CF-F7F8A92E03AA"
},
{
"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93EFBC67-F1C0-4256-BB08-17A3BCFE9CE2"
},
{
"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E33CE0C3-CD50-4E81-B17E-C71977199F70"
},
{
"criteria": "cpe:2.3:a:oracle:fusion_middleware:10.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCFB9A54-A10A-4D54-BA6C-C0BC1BC67E45"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert_us@oracle.com"
}