Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*

part: a version: 7.0 update: sp6

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3257 vulnerable 2026-06-08 04:50:33.727379 Details available
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Published: 2008-07-22T16:00:00.000Z
Updated: 2024-08-07T09:28:41.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0902 vulnerable 2026-06-08 04:50:18.177125 Details available
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694.
Published: 2008-02-22T21:00:00.000Z
Updated: 2024-08-07T08:01:40.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0901 vulnerable 2026-06-08 04:50:18.173549 Details available
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.
Published: 2008-02-22T21:00:00.000Z
Updated: 2024-08-07T08:01:40.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0895 vulnerable 2026-06-08 04:50:18.148071 Details available
BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers.
Published: 2008-02-22T21:00:00.000Z
Updated: 2024-08-07T08:01:40.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5576 vulnerable 2026-06-08 04:50:06.424067 Details available
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
Published: 2007-10-18T21:00:00.000Z
Updated: 2024-08-07T15:39:13.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4618 vulnerable 2026-06-08 04:49:56.844502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4617 vulnerable 2026-06-08 04:49:56.843637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4616 vulnerable 2026-06-08 04:49:56.839825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4613 vulnerable 2026-06-08 04:49:56.830378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2701 vulnerable 2026-06-08 04:49:45.841133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2697 vulnerable 2026-06-08 04:49:45.833341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2696 vulnerable 2026-06-08 04:49:45.832547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2695 vulnerable 2026-06-08 04:49:45.825329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2694 vulnerable 2026-06-08 04:49:45.814340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0421 vulnerable 2026-06-08 04:49:32.070743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0412 vulnerable 2026-06-08 04:49:32.060469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0410 vulnerable 2026-06-08 04:49:32.049569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2472 vulnerable 2026-06-08 04:49:06.824608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2471 vulnerable 2026-06-08 04:49:06.818833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0430 vulnerable 2026-06-08 04:48:53.834345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0424 vulnerable 2026-06-08 04:48:53.818581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0422 vulnerable 2026-06-08 04:48:53.812427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0420 vulnerable 2026-06-08 04:48:53.799757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0419 vulnerable 2026-06-08 04:48:53.792060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4767 vulnerable 2026-06-08 04:48:44.980628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4765 vulnerable 2026-06-08 04:48:44.977504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4764 vulnerable 2026-06-08 04:48:44.976012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4763 vulnerable 2026-06-08 04:48:44.974321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4762 vulnerable 2026-06-08 04:48:44.973042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4753 vulnerable 2026-06-08 04:48:44.965365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4752 vulnerable 2026-06-08 04:48:44.964402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4751 vulnerable 2026-06-08 04:48:44.956636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4750 vulnerable 2026-06-08 04:48:44.944064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4749 vulnerable 2026-06-08 04:48:44.920453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4705 vulnerable 2026-06-08 04:48:44.800204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4704 vulnerable 2026-06-08 04:48:44.788414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.