Bea

Records158All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high34CVSS 7.0–8.9

Exploited now

Bea records in CISA KEV

No Bea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weblogic Server 149 records CRITICAL Tuxedo 5 records LOW Weblogic Integration 4 records LOW Weblogic Workshop 4 records LOW Aqualogic Interaction 2 records LOW Aqualogic Service Bus 2 records LOW Aqualogic Enterprise Security 1 record LOW Jrockit 1 record LOW

Records

4 records in Weblogic Integration · all components

TI-2007-02616 CVE-2007-2705 · GHSA-5pvj-vp73-v747

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration…

LOW 38

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a We…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0174 Published 2007-05-16 No fix listed

TI-2002-02059 CVE-2002-2142 · GHSA-vx4p-89g5-6935

An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when…

LOW 35

An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not pre…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01283 Published 2005-11-16 No fix listed

TI-2003-00677 CVE-2003-0733 · GHSA-cfc9-g2p5-76v2

Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0…

LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01341 Published 2003-09-04 No fix listed

TI-2007-05360 CVE-2007-5576 · GHSA-xc7h-mpv6-3v2w

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before…

LOW 32

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind,…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.01002 Published 2007-10-18 No fix listed CWE-200

Open these records in search →