Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*

part: a version: 9.1 update: *

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2375 vulnerable 2026-06-08 04:55:07.122478 Details available
Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.
Published: 2010-07-13T22:07:00.000Z
Updated: 2024-08-07T02:32:16.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3257 vulnerable 2026-06-08 04:50:33.737906 Details available
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Published: 2008-07-22T16:00:00.000Z
Updated: 2024-08-07T09:28:41.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0901 vulnerable 2026-06-08 04:50:18.173722 Details available
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.
Published: 2008-02-22T21:00:00.000Z
Updated: 2024-08-07T08:01:40.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0899 vulnerable 2026-06-08 04:50:18.163405 Details available
Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page.
Published: 2008-02-22T21:00:00.000Z
Updated: 2024-08-07T08:01:40.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0898 vulnerable 2026-06-08 04:50:18.161061 Details available
The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected distributed queues.
Published: 2008-02-22T21:00:00.000Z
Updated: 2024-08-07T08:01:40.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0897 vulnerable 2026-06-08 04:50:18.154429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0895 vulnerable 2026-06-08 04:50:18.152538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0869 vulnerable 2026-06-08 04:50:17.976769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0863 vulnerable 2026-06-08 04:50:17.962084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5576 vulnerable 2026-06-08 04:50:06.432145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4616 vulnerable 2026-06-08 04:49:56.839996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4615 vulnerable 2026-06-08 04:49:56.838426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4614 vulnerable 2026-06-08 04:49:56.834936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2704 vulnerable 2026-06-08 04:49:45.845799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2700 vulnerable 2026-06-08 04:49:45.840618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2699 vulnerable 2026-06-08 04:49:45.840227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2697 vulnerable 2026-06-08 04:49:45.833628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2695 vulnerable 2026-06-08 04:49:45.831744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0422 vulnerable 2026-06-08 04:49:32.071130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0420 vulnerable 2026-06-08 04:49:32.069999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0418 vulnerable 2026-06-08 04:49:32.066184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0417 vulnerable 2026-06-08 04:49:32.065751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0416 vulnerable 2026-06-08 04:49:32.065344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0411 vulnerable 2026-06-08 04:49:32.054456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0410 vulnerable 2026-06-08 04:49:32.053045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2472 vulnerable 2026-06-08 04:49:06.830291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.