BEA Systems WebLogic Server 5.1
Approved changes feed: RSS · Atom
cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*
part: a version: 5.1 update: *
| Vendor | Bea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c) |
|---|---|
| Product | Weblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3257 |
vulnerable | 2026-06-08 04:50:33.710441 |
Details available
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Published: 2008-07-22T16:00:00.000Z
Updated: 2024-08-07T09:28:41.938Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1438 |
vulnerable | 2026-06-08 04:47:47.562271 |
Details available
Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user.
Published: 2007-10-23T01:00:00.000Z
Updated: 2024-08-08T02:28:03.597Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0733 |
vulnerable | 2026-06-08 04:47:22.352079 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.
Published: 2003-09-04T04:00:00.000Z
Updated: 2024-08-08T02:05:12.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1030 |
vulnerable | 2026-06-08 04:46:22.744954 |
Details available
Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T03:12:16.665Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-1238 |
vulnerable | 2026-06-08 04:45:19.527967 |
Details available
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-08-08T05:45:37.536Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-0683 |
vulnerable | 2026-06-08 04:45:18.584677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-0682 |
vulnerable | 2026-06-08 04:45:18.575943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-0500 |
vulnerable | 2026-06-08 04:45:18.176568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.