7.5

CVE-2004-0711

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version7.0
Bea ≫ Weblogic Server Version7.0 Editionexpress
Bea ≫ Weblogic Server Version7.0 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp1
Bea ≫ Weblogic Server Version7.0 Updatesp1 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp1 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp2
Bea ≫ Weblogic Server Version7.0 Updatesp2 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp2 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp3
Bea ≫ Weblogic Server Version7.0 Updatesp3 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp3 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp4
Bea ≫ Weblogic Server Version7.0 Updatesp4 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp4 Editionwin32
Bea ≫ Weblogic Server Version8.1
Bea ≫ Weblogic Server Version8.1 Editionexpress
Bea ≫ Weblogic Server Version8.1 Editionwin32
Bea ≫ Weblogic Server Version8.1 Updatesp1
Bea ≫ Weblogic Server Version8.1 Updatesp1 Editionexpress
Bea ≫ Weblogic Server Version8.1 Updatesp1 Editionwin32
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.91% 0.736
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.kb.cert.org/vuls/id/184558
Third Party Advisory
US Government Resource