CVE-2009-1012

Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow.

• http://osvdb.org/53765
• http://secunia.com/secunia_research/2009-22/
• http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• http://www.oracle.com/technology/deploy/security/wls-security/1012.html
• http://www.securityfocus.com/bid/34461
• http://www.securitytracker.com/id?1022059
• http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64935
• http://osvdb.org/53765
• http://secunia.com/secunia_research/2009-22/
• http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• http://www.oracle.com/technology/deploy/security/wls-security/1012.html
• http://www.securityfocus.com/bid/34461
• http://www.securitytracker.com/id?1022059
• http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64935

Published

Apr 15, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1006Unspecified vulnerability in the JRockit component in BEA Pr…
• CVE-2009-1007Unspecified vulnerability in the Data Mining component in Or…
• CVE-2009-1008Unspecified vulnerability in the Outside In Technology compo…
• CVE-2009-1009Unspecified vulnerability in the Outside In Technology compo…
• CVE-2009-1010Unspecified vulnerability in the Outside In Technology compo…
• CVE-2009-1011Unspecified vulnerability in the Outside In Technology compo…
• CVE-2009-1013Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2009-1014Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2009-1015Unspecified vulnerability in the Core RDBMS component in Ora…
• CVE-2009-1016Unspecified vulnerability in the WebLogic Server component i…
• CVE-2009-1017Unspecified vulnerability in the BI Publisher component in O…
• CVE-2009-1018Unspecified vulnerability in the Workspace Manager component…