Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Bea Systems Component: Weblogic Server Clear all filters
TI-2008-03119 CVE-2008-3257 · GHSA-g7f8-j599-7426

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server…

Priority CRITICAL 85

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86829 Published 2008-07-22 No fix listed CWE-119
TI-2008-00867 CVE-2008-0903 · GHSA-6qhc-v2h9-m47w

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as…

Priority LOW 22

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01189 Published 2008-02-22 No fix listed
TI-2008-00865 CVE-2008-0901 · GHSA-pq3p-2788-w982

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute…

Priority LOW 36

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed pa…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.02242 Published 2008-02-22 No fix listed CWE-200