Bea Systems

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Bea Systems records in CISA KEV

No Bea Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weblogic Portal 5 records LOW Weblogic Server 5 records CRITICAL Aqualogic Interaction 2 records LOW Weblogic Express 2 records LOW Apache Connector In Weblogic Server 1 record CRITICAL Plumtree Collaboration 1 record LOW Plumtree Foundation 1 record LOW Weblogic 1 record LOW

Records

5 records in Weblogic Server · all components

TI-2008-03119 CVE-2008-3257 · GHSA-g7f8-j599-7426

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server…

CRITICAL 85

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86829 Published 2008-07-22 No fix listed CWE-119

TI-2010-02281 CVE-2010-2375 · GHSA-m2g8-vmgj-6gxf

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability…

LOW 38

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allo…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.06509 Published 2010-07-13 No fix listed

TI-2008-00865 CVE-2008-0901 · GHSA-pq3p-2788-w982

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute…

LOW 36

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed pa…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.02242 Published 2008-02-22 No fix listed CWE-200

TI-2008-00867 CVE-2008-0903 · GHSA-6qhc-v2h9-m47w

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as…

LOW 22

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01189 Published 2008-02-22 No fix listed

TI-2008-00866 CVE-2008-0902 · GHSA-m5jv-88vc-r8cm

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-02-22 No fix listed CWE-79

Open these records in search →

Critical	1
High	3
Medium	10
Low	0
No CVSS	0