Filters
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an a…
9.8
First published (updated )
BEA Weblogic ServerThe cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contac…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerThe UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to stand…
4.6
First published (updated )
BEA Weblogic ServerThe embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 thro…
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 d…
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI…
5.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service…
7.2
First published (updated )
BEA Weblogic ServerBEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inacc…
4.6
First published (updated )
BEA Weblogic ServerBEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keyst…
2.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enab…
First published (updated )
BEA Weblogic ServerThe default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in…
2.1
First published (updated )
BEA Weblogic ServerBEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows rem…
First published (updated )
BEA Weblogic ServerWeblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRu…
2.1
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryptio…
2.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerThe Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to…
First published (updated )
BEA Weblogic ServerBEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to …
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain interna…
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web app…
4.6
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BE…
2.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BEA Weblogic ServerAn undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading …
7.5
First published (updated )
BEA Weblogic ServerBEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans (EJB…
7.5
First published (updated )