Filter
AND
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after mul…
7.8
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and e…
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not proper…
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using us…
5.1
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow l…
4.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerBEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keyst…
2.1
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enab…
First published (updated )
BEA Weblogic ServerThe default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in…
2.1
First published (updated )
BEA Weblogic ServerBEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows rem…
First published (updated )
BEA Weblogic ServerBEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerWeblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRu…
2.1
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryptio…
2.1
First published (updated )
BEA Weblogic ServerThe Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to…
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web app…
4.6
First published (updated )
BEA Weblogic ServerBEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inacc…
4.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerBEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain interna…
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI…
5.5
First published (updated )
BEA Weblogic ServerThe Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-wa…
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may…
4.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-…
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext…
4.6
First published (updated )
BEA Weblogic ServerThe remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Expres…
6.4
First published (updated )
BEA Weblogic ServerThe URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" a…
7.5
First published (updated )
BEA Weblogic ServerThe WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 an…
5.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service…
7.2
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encryp…
5.4
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and e…
7.2
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not proper…
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and e…
1.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.