Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*

part: a version: 6.1 update: sp3

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Editionexpress
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5576 vulnerable 2026-06-08 04:50:06.415401 Details available
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Published: 2007-10-18T21:00:00.000Z
Updated: 2024-08-07T15:39:13.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2695 vulnerable 2026-06-08 04:49:45.824975 Details available
The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2694 vulnerable 2026-06-08 04:49:45.803555 Details available
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2472 vulnerable 2026-06-08 04:49:06.824263 Details available
Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys.
Published: 2006-05-19T10:00:00.000Z
Updated: 2024-08-07T17:51:04.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2471 vulnerable 2026-06-08 04:49:06.810195 Details available
Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.
Published: 2006-05-19T10:00:00.000Z
Updated: 2024-08-07T17:51:04.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1352 vulnerable 2026-06-08 04:48:56.994132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0424 vulnerable 2026-06-08 04:48:53.818286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0422 vulnerable 2026-06-08 04:48:53.808751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4764 vulnerable 2026-06-08 04:48:44.975416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4762 vulnerable 2026-06-08 04:48:44.972460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4761 vulnerable 2026-06-08 04:48:44.970862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4751 vulnerable 2026-06-08 04:48:44.956240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4750 vulnerable 2026-06-08 04:48:44.928947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4749 vulnerable 2026-06-08 04:48:44.916330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4705 vulnerable 2026-06-08 04:48:44.793374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1749 vulnerable 2026-06-08 04:48:27.375764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1748 vulnerable 2026-06-08 04:48:27.373902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1747 vulnerable 2026-06-08 04:48:27.372062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1746 vulnerable 2026-06-08 04:48:27.369952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1745 vulnerable 2026-06-08 04:48:27.368061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1743 vulnerable 2026-06-08 04:48:27.357761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1742 vulnerable 2026-06-08 04:48:27.332536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2696 vulnerable 2026-06-08 04:48:10.613787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2320 vulnerable 2026-06-08 04:48:09.272751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1758 vulnerable 2026-06-08 04:48:07.498131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1757 vulnerable 2026-06-08 04:48:07.486985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0713 vulnerable 2026-06-08 04:47:50.954080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1290 vulnerable 2026-06-08 04:47:47.189222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1223 vulnerable 2026-06-08 04:47:23.712306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1220 vulnerable 2026-06-08 04:47:23.700015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0151 vulnerable 2026-06-08 04:47:20.830012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1030 vulnerable 2026-06-08 04:46:22.765193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.