Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Bea
Weblogic Server

Bea Weblogic Server vulnerabilities

Known exploitedIn KEVPublic exploitFix available

bea weblogic serverBEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates...CVE-2005-04325.0 MediumFebruary 15, 2005
bea weblogic serverBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation ...CVE-2004-26965.5 MediumDecember 31, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a...CVE-2004-24245.0 MediumDecember 31, 2004
bea weblogic serverBEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to...CVE-2004-23212.1 LowDecember 31, 2004
bea weblogic serverThe default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and...CVE-2004-23205.8 MediumDecember 31, 2004
bea weblogic serverBEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in...CVE-2004-17574.6 MediumDecember 31, 2004
bea weblogic serverThe WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2...CVE-2004-07155.1 MediumJuly 21, 2004
bea weblogic serverThe remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic...CVE-2004-07136.4 MediumJuly 21, 2004
bea weblogic serverThe configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic...CVE-2004-07124.6 MediumJuly 21, 2004
bea weblogic serverThe URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*...CVE-2004-07117.5 HighJuly 21, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1...CVE-2004-06527.2 HighJuly 13, 2004
businessobjects crystal enterprise, crystal reports, microsoft business solutions crm +6 more +8 moreDirectory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and...CVE-2004-0204Public exploitEPSS 72.4%7.5 HighJune 11, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce...CVE-2004-04712.1 LowMay 20, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing...CVE-2004-04707.5 HighMay 20, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6...CVE-2004-17584.6 MediumApril 13, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using...CVE-2004-17565.0 MediumApril 13, 2004
bea weblogic serverRace condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory...CVE-2003-14384.3 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a...CVE-2003-14372.1 LowDecember 31, 2003
bea weblogic serverBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup...CVE-2003-12905.0 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password...CVE-2003-12262.1 LowDecember 31, 2003
bea weblogic serverThe default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords...CVE-2003-12252.1 LowDecember 31, 2003
bea weblogic serverWeblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the...CVE-2003-12242.1 LowDecember 31, 2003
bea weblogic serverThe Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers...CVE-2003-12235.0 MediumDecember 31, 2003
bea weblogic serverBEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service ...CVE-2003-12225.0 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request...CVE-2003-12215.0 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows...CVE-2003-12205.0 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that...CVE-2003-10947.2 HighDecember 31, 2003
bea weblogic serverBEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is...CVE-2003-10934.6 MediumDecember 31, 2003
bea weblogic serverCross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier...CVE-2003-0624Public exploit4.3 MediumNovember 5, 2003
bea tuxedo, weblogic server +1 moreCross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and...CVE-2003-06234.3 MediumNovember 5, 2003
bea tuxedo, weblogic server +1 moreThe Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a...CVE-2003-06225.0 MediumNovember 5, 2003
bea tuxedo, weblogic server +1 moreThe Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine...CVE-2003-0621Public exploit5.0 MediumNovember 5, 2003
bea liquid data, weblogic integration, weblogic server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid...CVE-2003-07336.8 MediumSeptember 4, 2003
bea weblogic serverBEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users...CVE-2003-064010.0 HighAugust 2, 2003
bea weblogic serverBEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain...CVE-2003-01517.5 HighMarch 21, 2003
bea weblogic serverBEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web...CVE-2003-10954.6 MediumMarch 18, 2003
bea weblogic serverBEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause...CVE-2002-21772.6 LowDecember 31, 2002
bea weblogic server, weblogic integration +1 moreAn undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when...CVE-2002-21427.5 HighDecember 31, 2002
bea weblogic serverBEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans ...CVE-2002-21417.5 HighDecember 31, 2002
bea weblogic serverRace condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0...CVE-2002-10302.6 LowOctober 4, 2002
bea weblogic serverBEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series...CVE-2002-0106Public exploit5.0 MediumMarch 15, 2002
bea weblogic serverBuffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary...CVE-2001-0098Public exploitEPSS 78.4%10.0 HighFebruary 2, 2001
bea weblogic serverBEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass...CVE-2000-12387.5 HighDecember 31, 2000
bea weblogic serverBEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow...CVE-2000-0685Public exploitEPSS 12.3%10.0 HighOctober 13, 2000
bea weblogic serverBEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote...CVE-2000-0684Public exploitEPSS 12.3%10.0 HighOctober 13, 2000
bea weblogic serverBEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*...CVE-2000-06835.0 MediumOctober 13, 2000
bea weblogic serverBEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting ...CVE-2000-06825.0 MediumOctober 13, 2000
bea weblogic serverBuffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary...CVE-2000-0681EPSS 50.9%10.0 HighOctober 13, 2000
bea weblogic serverThe default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of...CVE-2000-0500Public exploit5.0 MediumJune 21, 2000
bea weblogic serverThe default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view...CVE-2000-04997.5 HighJune 8, 2000

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open