2.1
CVE-2003-1437
- EPSS 0.22%
- Veröffentlicht 31.12.2003 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:04:26
- Erkennungen
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version 7.0 Edition express
Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition express
Bea ≫ Weblogic Server Version 7.0.0.1 Edition express
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1 Edition express
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 7.0 Update sp1
Bea ≫ Weblogic Server Version 7.0.0.1
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 7.0 Update sp1
Bea ≫ Weblogic Server Version 7.0.0.1
Bea ≫ Weblogic Server Version 7.0.0.1 Update sp1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.117 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:N
|
http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-25.jsp
http://www.securityfocus.com/bid/6719
https://exchange.xforce.ibmcloud.com/vulnerabilities/11220