CVSS: 7.5EPSS: 1%CPEs: 15EXPL: 0CVE-2007-0410
https://notcve.org/view.php?id=CVE-2007-0410
23 Jan 2007 — Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service (thread and system hang) via unspecified "sequences of events." Vulnerabilidad no especificada en la administración de hilos en BEA WebLogic 7.0 hasta 7.0 SP6, 8.1 hasta 8.1 SP5, 9.0, y 9.1, cuando se usa la autenticación T3, permite a atacantes remotos provocar una denegación de servicio (cuelgue de hi... • http://dev2dev.bea.com/pub/advisory/204 •
CVSS: 7.4EPSS: 0%CPEs: 5EXPL: 0CVE-2007-0411
https://notcve.org/view.php?id=CVE-2007-0411
23 Jan 2007 — BEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 Gold, when WS-Security is used, does not properly validate certificates, which allows remote attackers to conduct a man-in-the-middle (MITM) attack. BEA WebLogic Server 8.1 hasta 8.1 SP5, 9.0, 9.1, y 9.2 Gold, cuando WS-Security es utilizado, no valida certificados adecuadamente, lo cual permite a atacantes remotos llevar a cabo ataques de hombre en el medio (MITM, man-in-the-middle). • http://dev2dev.bea.com/pub/advisory/205 •
CVSS: 7.5EPSS: 1%CPEs: 7EXPL: 0CVE-2007-0414
https://notcve.org/view.php?id=CVE-2007-0414
23 Jan 2007 — BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service (server hang) via certain requests that cause muxer threads to block when processing error pages. BEA WebLogic Server 6.1 hasta 6.1 SP7, 7.0 hasta 7.0 SP6, 8.1 hasta 8.1 SP5, y 9.0 permite a atacantes remotos provocar una denegación de servicio (cuelgue del servidor) mediante ciertas peticiones que causan que hilos multiplexados se bloqueen al procesar páginas de er... • http://dev2dev.bea.com/pub/advisory/208 •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2007-0418
https://notcve.org/view.php?id=CVE-2007-0418
23 Jan 2007 — BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods. BEA WebLogic Server 7.0 hasta 7.0 SP6, 8.1 hasta 8.1 SP5, 9.0, y 9.1 no hace cmplir las políticas de seguridad que declara los permisos para los métodos EJB que tienen parámetros array, lo cual permite a atacantes remotos obtener acceso no autorizado a e... • http://dev2dev.bea.com/pub/advisory/212 •
CVSS: 9.8EPSS: 0%CPEs: 19EXPL: 0CVE-2006-2469
https://notcve.org/view.php?id=CVE-2006-2469
19 May 2006 — The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges. • http://dev2dev.bea.com/pub/advisory/189 •
CVSS: 7.5EPSS: 0%CPEs: 44EXPL: 0CVE-2006-2472
https://notcve.org/view.php?id=CVE-2006-2472
19 May 2006 — Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys. • http://dev2dev.bea.com/pub/advisory/186 •
CVSS: 7.5EPSS: 0%CPEs: 24EXPL: 1CVE-2006-0419
https://notcve.org/view.php?id=CVE-2006-0419
25 Jan 2006 — BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections. • http://dev2dev.bea.com/pub/advisory/163 •
CVSS: 9.8EPSS: 0%CPEs: 20EXPL: 0CVE-2006-0427
https://notcve.org/view.php?id=CVE-2006-0427
25 Jan 2006 — Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted. • http://dev2dev.bea.com/pub/advisory/171 •
CVSS: 7.5EPSS: 1%CPEs: 30EXPL: 0CVE-2006-0430
https://notcve.org/view.php?id=CVE-2006-0430
25 Jan 2006 — Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown). • http://dev2dev.bea.com/pub/advisory/174 •
CVSS: 6.8EPSS: 1%CPEs: 42EXPL: 0CVE-2005-4751
https://notcve.org/view.php?id=CVE-2005-4751
31 Dec 2005 — Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9.0, 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allow remote attackers to inject arbitrary web script or HTML and gain administrative privileges via unknown attack vectors. • http://dev2dev.bea.com/pub/advisory/139 •