4.3
CVE-2008-0903
- EPSS 1.19%
- Veröffentlicht 22.02.2008 21:44:00
- Zuletzt bearbeitet 16.06.2026 22:50:34
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginUnspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea Systems ≫ Weblogic Express Updatemp2 Version <= 10.0
Bea Systems ≫ Weblogic Server Updatemp2 Version <= 10.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.19% | 0.638 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
http://secunia.com/advisories/29041
http://dev2dev.bea.com/pub/advisory/275
http://www.securitytracker.com/id?1019450
http://www.vupen.com/english/advisories/2008/0608/references