6
CVE-2008-0900
- EPSS 4.53%
- Published 22.02.2008 21:44:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Data is provided by the National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version8.1 Updatesp4
Bea ≫ Weblogic Server Version8.1 Updatesp4 Editionexpress
Bea ≫ Weblogic Server Version8.1 Updatesp5
Bea ≫ Weblogic Server Version8.1 Updatesp5 Editionexpress
Bea ≫ Weblogic Server Version8.1 Updatesp6
Bea ≫ Weblogic Server Version8.1 Updatesp6 Editionexpress
Bea ≫ Weblogic Server Version9.2
Bea ≫ Weblogic Server Version9.2 Updatemp1
Bea ≫ Weblogic Server Version10.0
Bea Systems ≫ Weblogic Express Version9.2 Updatemp1
Bea Systems ≫ Weblogic Express Version10.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.53% | 0.887 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|