Skip to content
Bea vulnerabilities
Newest
-
bea weblogic server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
CVE-2024-21175
7.5 High
-
bea weblogic server
Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the...
CVE-2010-2375
Public exploit
6.4 Medium
-
bea weblogic server, bea systems apache connector in weblogic server +1 more
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly...
CVE-2008-3257
Public exploit
EPSS 83.6%
10.0 High
-
bea weblogic server
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1...
CVE-2008-0902
4.3 Medium
-
bea weblogic server
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force...
CVE-2008-0901
7.1 High
-
bea weblogic server, bea systems weblogic express +1 more
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2...
CVE-2008-0900
EPSS 10.1%
6.0 Medium
-
bea weblogic server
Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and...
CVE-2008-0899
4.3 Medium
-
bea weblogic server
The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain...
CVE-2008-0898
5.8 Medium
-
bea weblogic server
Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated...
CVE-2008-0897
7.9 High
-
bea weblogic server
BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass...
CVE-2008-0895
6.4 Medium
-
bea weblogic workshop, bea systems weblogic, bea weblogic server +2 more
Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop...
CVE-2008-0869
4.3 Medium
-
bea weblogic workshop
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote...
CVE-2008-0866
4.3 Medium
-
bea weblogic server
BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security...
CVE-2008-0863
5.0 Medium
-
bea weblogic mobility server
Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3...
CVE-2007-6384
7.5 High
-
bea aqualogic interaction
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0...
CVE-2007-6198
Public exploit
5.0 Medium
-
bea aqualogic interaction
The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows...
CVE-2007-6197
5.0 Medium
-
bea tuxedo, weblogic integration, weblogic server +2 more +4 more
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo...
CVE-2007-5576
6.8 Medium
-
bea weblogic server
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7...
CVE-2007-4618
7.8 High
-
bea weblogic server
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and...
CVE-2007-4617
7.8 High
-
bea weblogic server
The SSL server implementation in BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6,...
CVE-2007-4616
6.4 Medium
-
bea weblogic server
The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2...
CVE-2007-4615
6.4 Medium
-
bea weblogic server
BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy...
CVE-2007-4614
7.5 High
-
bea weblogic server
SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold...
CVE-2007-4613
6.8 Medium
-
bea weblogic integration, weblogic workshop +1 more
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before...
CVE-2007-2705
7.8 High
-
bea weblogic server
BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL...
CVE-2007-2704
5.4 Medium
-
bea weblogic server
The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6,...
CVE-2007-2701
4.6 Medium
-
bea weblogic server
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic...
CVE-2007-2700
4.0 Medium
-
bea weblogic server
The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not...
CVE-2007-2699
EPSS 29.3%
7.1 High
-
bea weblogic server
The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes...
CVE-2007-2698
5.0 Medium
-
bea weblogic server
The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through...
CVE-2007-2697
5.1 Medium
-
bea weblogic server
The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5...
CVE-2007-2696
6.8 Medium
-
bea weblogic server
The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1...
CVE-2007-2695
5.1 Medium
-
bea weblogic server
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6...
CVE-2007-2694
4.3 Medium
-
bea aqualogic enterprise security
BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not...
CVE-2007-0434
4.6 Medium
-
bea aqualogic service bus
Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2...
CVE-2007-0433
6.5 Medium
-
bea aqualogic service bus
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages...
CVE-2007-0432
7.5 High
-
bea jrockit, weblogic server +1 more
Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1...
CVE-2007-0425
7.5 High
-
bea weblogic server
Unspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server...
CVE-2007-0424
5.0 Medium
-
bea weblogic server
BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to...
CVE-2007-0422
5.0 Medium
-
bea weblogic server
BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause...
CVE-2007-0421
6.4 Medium
-
bea weblogic server
BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive...
CVE-2007-0420
5.0 Medium
-
bea weblogic server
The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not...
CVE-2007-0419
5.0 Medium
-
bea weblogic server
BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a...
CVE-2007-0418
7.5 High
-
bea weblogic server
BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the...
CVE-2007-0417
10.0 High
-
bea weblogic server
The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify...
CVE-2007-0416
7.5 High
-
bea weblogic server
BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic...
CVE-2007-0415
5.0 Medium
-
bea weblogic server
BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows...
CVE-2007-0414
5.0 Medium
-
bea weblogic server
BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after...
CVE-2007-0413
4.4 Medium
-
bea weblogic server
BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows...
CVE-2007-0412
5.0 Medium
-
bea weblogic server
BEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 Gold, when WS-Security is used, does...
CVE-2007-0411
6.8 Medium
- Show olderLoading…