Weblogic Server
Approved changes feed: RSS · Atom
cpe:2.3:a:bea:weblogic_server:*:sp5:*:*:*:*:*:*
part: a version: * update: sp5
| Vendor | Bea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c) |
|---|---|
| Product | Weblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-0425 |
vulnerable | 2026-06-08 04:49:32.076415 |
Details available
Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow.
Published: 2007-01-23T00:00:00.000Z
Updated: 2024-08-07T12:19:30.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0418 |
vulnerable | 2026-06-08 04:49:32.066108 |
Details available
BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods.
Published: 2007-01-23T00:00:00.000Z
Updated: 2024-08-07T12:19:29.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0415 |
vulnerable | 2026-06-08 04:49:32.064953 |
Details available
BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions.
Published: 2007-01-23T00:00:00.000Z
Updated: 2024-08-07T12:19:30.303Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0414 |
vulnerable | 2026-06-08 04:49:32.064486 |
Details available
BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service (server hang) via certain requests that cause muxer threads to block when processing error pages.
Published: 2007-01-23T00:00:00.000Z
Updated: 2024-08-07T12:19:29.975Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0413 |
vulnerable | 2026-06-08 04:49:32.062357 |
Details available
BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file.
Published: 2007-01-23T00:00:00.000Z
Updated: 2024-08-07T12:19:29.989Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0411 |
vulnerable | 2026-06-08 04:49:32.054363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.