Bea

Records158All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high34CVSS 7.0–8.9

Exploited now

Bea records in CISA KEV

No Bea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weblogic Server 149 records CRITICAL Tuxedo 5 records LOW Weblogic Integration 4 records LOW Weblogic Workshop 4 records LOW Aqualogic Interaction 2 records LOW Aqualogic Service Bus 2 records LOW Aqualogic Enterprise Security 1 record LOW Jrockit 1 record LOW

Records

4 records in Weblogic Workshop · all components

TI-2007-02616 CVE-2007-2705 · GHSA-5pvj-vp73-v747

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration…

LOW 38

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a We…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0174 Published 2007-05-16 No fix listed

TI-2007-05360 CVE-2007-5576 · GHSA-xc7h-mpv6-3v2w

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before…

LOW 32

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind,…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.01002 Published 2007-10-18 No fix listed CWE-200

TI-2008-00835 CVE-2008-0869 · GHSA-gh56-x5j7-wgqm

Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and…

LOW 22

Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-02-21 No fix listed CWE-79

TI-2008-00832 CVE-2008-0866 · GHSA-m84x-fjr3-244q

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-02-21 No fix listed CWE-79

Open these records in search →