BEA Systems WebLogic Express 6.1 SP4
Approved changes feed: RSS · Atom
cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*
part: a version: 6.1 update: sp4
| Vendor | Bea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c) |
|---|---|
| Product | Weblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52) |
| Edition | express |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-5576 |
vulnerable | 2026-06-08 04:50:06.415877 |
Details available
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Published: 2007-10-18T21:00:00.000Z
Updated: 2024-08-07T15:39:13.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2695 |
vulnerable | 2026-06-08 04:49:45.825010 |
Details available
The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2694 |
vulnerable | 2026-06-08 04:49:45.804580 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2472 |
vulnerable | 2026-06-08 04:49:06.824296 |
Details available
Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys.
Published: 2006-05-19T10:00:00.000Z
Updated: 2024-08-07T17:51:04.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2471 |
vulnerable | 2026-06-08 04:49:06.810944 |
Details available
Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.
Published: 2006-05-19T10:00:00.000Z
Updated: 2024-08-07T17:51:04.536Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1352 |
vulnerable | 2026-06-08 04:48:56.994165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0424 |
vulnerable | 2026-06-08 04:48:53.818318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0422 |
vulnerable | 2026-06-08 04:48:53.809736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4764 |
vulnerable | 2026-06-08 04:48:44.975469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4762 |
vulnerable | 2026-06-08 04:48:44.972514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4761 |
vulnerable | 2026-06-08 04:48:44.970915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4751 |
vulnerable | 2026-06-08 04:48:44.956279 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4750 |
vulnerable | 2026-06-08 04:48:44.930129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4749 |
vulnerable | 2026-06-08 04:48:44.916380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4705 |
vulnerable | 2026-06-08 04:48:44.794197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1749 |
vulnerable | 2026-06-08 04:48:27.375812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1748 |
vulnerable | 2026-06-08 04:48:27.373950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1747 |
vulnerable | 2026-06-08 04:48:27.372110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1746 |
vulnerable | 2026-06-08 04:48:27.370009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1745 |
vulnerable | 2026-06-08 04:48:27.368109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1743 |
vulnerable | 2026-06-08 04:48:27.357811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1742 |
vulnerable | 2026-06-08 04:48:27.334571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2696 |
vulnerable | 2026-06-08 04:48:10.613840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2320 |
vulnerable | 2026-06-08 04:48:09.272805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1758 |
vulnerable | 2026-06-08 04:48:07.498172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1757 |
vulnerable | 2026-06-08 04:48:07.488572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0713 |
vulnerable | 2026-06-08 04:47:50.954142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1290 |
vulnerable | 2026-06-08 04:47:47.190714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1223 |
vulnerable | 2026-06-08 04:47:23.721165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1220 |
vulnerable | 2026-06-08 04:47:23.700057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0151 |
vulnerable | 2026-06-08 04:47:20.831593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.