Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:*

part: a version: 4.0.4 update: *

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3257 vulnerable 2026-06-03 14:28:52.722898 Details available
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Published: 2008-07-22T16:00:00.000Z
Updated: 2024-08-07T09:28:41.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0685 vulnerable 2026-06-03 14:25:59.695836 Details available
BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:28:41.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0684 vulnerable 2026-06-03 14:25:59.694869 Details available
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:28:41.059Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.