Bea

Weblogic Integration

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2007-5576

  • EPSS 0.6%
  • Published 18.10.2007 21:17:00
  • Last modified 09.04.2025 00:30:58

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls c...

7.8

CVE-2007-2705

  • EPSS 0.43%
  • Published 16.05.2007 01:19:00
  • Last modified 09.04.2025 00:30:58

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlw...

6.8

CVE-2003-0733

  • EPSS 0.97%
  • Published 20.10.2003 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via...

7.5

CVE-2002-2142

  • EPSS 0.51%
  • Published 31.12.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a "/" character in certai...