7.9
CVE-2008-0897
- EPSS 1.25%
- Veröffentlicht 22.02.2008 21:44:00
- Zuletzt bearbeitet 16.06.2026 22:50:33
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginUnspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version9.0
Bea ≫ Weblogic Server Version9.1
Bea ≫ Weblogic Server Version9.2
Bea ≫ Weblogic Server Version9.2 Updatemp1
Bea ≫ Weblogic Server Version10.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.25% | 0.654 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.9 | 6.8 | 9.2 |
AV:N/AC:M/Au:S/C:C/I:C/A:N
|
http://secunia.com/advisories/29041
http://www.vupen.com/english/advisories/2008/0612/references
http://dev2dev.bea.com/pub/advisory/267
http://www.securitytracker.com/id?1019444