Weblogic Server
Approved changes feed: RSS · Atom
cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*
part: a version: 7.0 update: sp6
| Vendor | Bea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c) |
|---|---|
| Product | Weblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52) |
| Edition | express |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-5576 |
vulnerable | 2026-06-08 04:50:06.424584 |
Details available
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Published: 2007-10-18T21:00:00.000Z
Updated: 2024-08-07T15:39:13.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2697 |
vulnerable | 2026-06-08 04:49:45.833358 |
Details available
The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the administrator password, or flood the server with login attempts and cause a denial of service.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.266Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2695 |
vulnerable | 2026-06-08 04:49:45.825348 |
Details available
The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2694 |
vulnerable | 2026-06-08 04:49:45.814851 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2472 |
vulnerable | 2026-06-08 04:49:06.824740 |
Details available
Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys.
Published: 2006-05-19T10:00:00.000Z
Updated: 2024-08-07T17:51:04.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2471 |
vulnerable | 2026-06-08 04:49:06.819357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1352 |
vulnerable | 2026-06-08 04:48:57.000902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0430 |
vulnerable | 2026-06-08 04:48:53.834361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0424 |
vulnerable | 2026-06-08 04:48:53.818597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0422 |
vulnerable | 2026-06-08 04:48:53.812446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0420 |
vulnerable | 2026-06-08 04:48:53.799775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0419 |
vulnerable | 2026-06-08 04:48:53.793034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4767 |
vulnerable | 2026-06-08 04:48:44.980649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4765 |
vulnerable | 2026-06-08 04:48:44.977524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4764 |
vulnerable | 2026-06-08 04:48:44.976030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4762 |
vulnerable | 2026-06-08 04:48:44.973060 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4753 |
vulnerable | 2026-06-08 04:48:44.965385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4752 |
vulnerable | 2026-06-08 04:48:44.964423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4751 |
vulnerable | 2026-06-08 04:48:44.956655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4750 |
vulnerable | 2026-06-08 04:48:44.944099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4749 |
vulnerable | 2026-06-08 04:48:44.920475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4705 |
vulnerable | 2026-06-08 04:48:44.801184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.