CVE-2009-1016

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow involving an unspecified Server Plug-in and a crafted SSL certificate.

• http://secunia.com/secunia_research/2009-23/
• http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• http://www.securityfocus.com/bid/34461
• http://www.securitytracker.com/id?1022059
• http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64934
• http://secunia.com/secunia_research/2009-23/
• http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• http://www.securityfocus.com/bid/34461
• http://www.securitytracker.com/id?1022059
• http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64934

Published

Apr 15, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1010Unspecified vulnerability in the Outside In Technology compo…
• CVE-2009-1011Unspecified vulnerability in the Outside In Technology compo…
• CVE-2009-1012Unspecified vulnerability in the plug-ins for Apache and IIS…
• CVE-2009-1013Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2009-1014Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2009-1015Unspecified vulnerability in the Core RDBMS component in Ora…
• CVE-2009-1017Unspecified vulnerability in the BI Publisher component in O…
• CVE-2009-1018Unspecified vulnerability in the Workspace Manager component…
• CVE-2009-1019Unspecified vulnerability in the Network Authentication comp…
• CVE-2009-1020Unspecified vulnerability in the Network Foundation componen…
• CVE-2009-1021Unspecified vulnerability in the Advanced Replication compon…
• CVE-2009-1022Heap-based buffer overflow in the Preview/ Set Segment funct…