Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3257 vulnerable 2026-06-08 04:50:33.717363 Details available
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Published: 2008-07-22T16:00:00.000Z
Updated: 2024-08-07T09:28:41.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4618 vulnerable 2026-06-08 04:49:56.844172 Details available
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.
Published: 2007-08-31T00:00:00.000Z
Updated: 2024-08-07T15:01:09.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4617 vulnerable 2026-06-08 04:49:56.843389 Details available
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP4 allows remote attackers to cause a denial of service (server thread hang) via unspecified vectors.
Published: 2007-08-31T00:00:00.000Z
Updated: 2024-08-07T15:01:09.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4613 vulnerable 2026-06-08 04:49:56.823195 Details available
SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a different vulnerability than CVE-2006-2461.
Published: 2007-08-31T00:00:00.000Z
Updated: 2024-08-07T15:01:09.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1749 vulnerable 2026-06-08 04:48:27.375454 Details available
Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denial of service (CPU consumption from thread looping).
Published: 2005-05-24T04:00:00.000Z
Updated: 2024-08-07T21:59:24.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1748 vulnerable 2026-06-08 04:48:27.373597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1747 vulnerable 2026-06-08 04:48:27.371744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1746 vulnerable 2026-06-08 04:48:27.369631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1745 vulnerable 2026-06-08 04:48:27.367733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1743 vulnerable 2026-06-08 04:48:27.357429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1742 vulnerable 2026-06-08 04:48:27.317982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1438 vulnerable 2026-06-08 04:47:47.562809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0151 vulnerable 2026-06-08 04:47:20.824600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2142 vulnerable 2026-06-08 04:47:19.201368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1030 vulnerable 2026-06-08 04:46:22.758229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.