2.6
CVE-2002-2177
- EPSS 0.32%
- Published 31.12.2002 05:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.
Data is provided by the National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version6.1
Bea ≫ Weblogic Server Version6.1 Editionexpress
Bea ≫ Weblogic Server Version6.1 Updatesp1
Bea ≫ Weblogic Server Version6.1 Updatesp1 Editionexpress
Bea ≫ Weblogic Server Version7.0
Bea ≫ Weblogic Server Version7.0 Editionexpress
Bea ≫ Weblogic Server Version7.0.0.1
Bea ≫ Weblogic Server Version7.0.0.1 Editionexpress
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.517 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 2.6 | 4.9 | 2.9 |
AV:N/AC:H/Au:N/C:P/I:N/A:N
|