Bea Systems

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Bea Systems records in CISA KEV

No Bea Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weblogic Portal 5 records LOW Weblogic Server 5 records CRITICAL Aqualogic Interaction 2 records LOW Weblogic Express 2 records LOW Apache Connector In Weblogic Server 1 record CRITICAL Plumtree Collaboration 1 record LOW Plumtree Foundation 1 record LOW Weblogic 1 record LOW

Records

2 records in Weblogic Express · all components

TI-2008-00864 CVE-2008-0900 · GHSA-fx8p-9q3f-f3m3

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6…

LOW 39

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.10067 Published 2008-02-22 No fix listed CWE-264

TI-2008-00867 CVE-2008-0903 · GHSA-6qhc-v2h9-m47w

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as…

LOW 22

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01189 Published 2008-02-22 No fix listed

Open these records in search →

Critical	1
High	3
Medium	10
Low	0
No CVSS	0