Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*

part: a version: 8.1 update: sp4

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Editionexpress
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-0900 vulnerable 2026-06-08 04:50:18.165602 Details available
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Published: 2008-02-22T21:00:00.000Z
Updated: 2024-08-07T08:01:40.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5576 vulnerable 2026-06-08 04:50:06.430658 Details available
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Published: 2007-10-18T21:00:00.000Z
Updated: 2024-08-07T15:39:13.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2697 vulnerable 2026-06-08 04:49:45.833530 Details available
The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the administrator password, or flood the server with login attempts and cause a denial of service.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2695 vulnerable 2026-06-08 04:49:45.825672 Details available
The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2694 vulnerable 2026-06-08 04:49:45.821030 Details available
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2007-05-16T01:00:00.000Z
Updated: 2024-08-07T13:49:57.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2472 vulnerable 2026-06-08 04:49:06.824917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2471 vulnerable 2026-06-08 04:49:06.823569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1352 vulnerable 2026-06-08 04:48:57.004948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0430 vulnerable 2026-06-08 04:48:53.834490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0427 vulnerable 2026-06-08 04:48:53.820075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0426 vulnerable 2026-06-08 04:48:53.819573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0424 vulnerable 2026-06-08 04:48:53.818726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0422 vulnerable 2026-06-08 04:48:53.812579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0420 vulnerable 2026-06-08 04:48:53.799907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0419 vulnerable 2026-06-08 04:48:53.797171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4767 vulnerable 2026-06-08 04:48:44.981445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4766 vulnerable 2026-06-08 04:48:44.979601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4765 vulnerable 2026-06-08 04:48:44.978186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4764 vulnerable 2026-06-08 04:48:44.976498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4762 vulnerable 2026-06-08 04:48:44.973321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4761 vulnerable 2026-06-08 04:48:44.971677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4756 vulnerable 2026-06-08 04:48:44.967612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4753 vulnerable 2026-06-08 04:48:44.965585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4752 vulnerable 2026-06-08 04:48:44.964631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4751 vulnerable 2026-06-08 04:48:44.956828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4750 vulnerable 2026-06-08 04:48:44.952264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4749 vulnerable 2026-06-08 04:48:44.923210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4705 vulnerable 2026-06-08 04:48:44.804632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1749 vulnerable 2026-06-08 04:48:27.377268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1748 vulnerable 2026-06-08 04:48:27.374823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1747 vulnerable 2026-06-08 04:48:27.372947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1746 vulnerable 2026-06-08 04:48:27.370812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1745 vulnerable 2026-06-08 04:48:27.368930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1743 vulnerable 2026-06-08 04:48:27.358755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1742 vulnerable 2026-06-08 04:48:27.354430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1380 vulnerable 2026-06-08 04:48:26.491408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2424 vulnerable 2026-06-08 04:48:09.630914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1290 vulnerable 2026-06-08 04:47:47.214036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.