Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:5.0.1:*:enterprise:*:*:*:*:*

part: a version: 5.0.1 update: *

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0623 vulnerable 2026-06-03 14:26:26.075321 Details available
Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument.
Published: 2003-11-05T05:00:00.000Z
Updated: 2024-08-08T01:58:11.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0622 vulnerable 2026-06-03 14:26:26.074813 Details available
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.
Published: 2003-11-05T05:00:00.000Z
Updated: 2024-08-08T01:58:11.126Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0621 vulnerable 2026-06-03 14:26:26.073684 Details available
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.
Published: 2003-11-05T05:00:00.000Z
Updated: 2024-08-08T01:58:11.123Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.