IDCVSSSummaryLast (major) updatePublished
CVE-2003-0640 10.0
BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges.
05-09-2008 - 20:34 27-08-2003 - 04:00
CVE-2007-0419 5.0
The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service (server outage).
08-03-2011 - 02:49 23-01-2007 - 00:28
CVE-2007-0424 5.0
Unspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server before September 2006 for Netscape Enterprise Server allow remote attackers to cause a denial of service via certain requests that trigger errors that l
08-03-2011 - 02:49 23-01-2007 - 00:28
CVE-2000-0499 5.0
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
10-10-2017 - 01:29 08-06-2000 - 04:00
CVE-2003-0624 4.3
Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.
11-07-2017 - 01:29 01-12-2003 - 05:00
Back to Top Mark selected
Back to Top