Page 5 of 45 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 24EXPL: 1

CVE-2006-0419

https://notcve.org/view.php?id=CVE-2006-0419

25 Jan 2006 — BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections. • http://dev2dev.bea.com/pub/advisory/163 •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2006-0432

https://notcve.org/view.php?id=CVE-2006-0432

25 Jan 2006 — Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources. • http://dev2dev.bea.com/pub/advisory/176 •

CVSS: 9.8EPSS: 0%CPEs: 20EXPL: 0

CVE-2006-0427

https://notcve.org/view.php?id=CVE-2006-0427

25 Jan 2006 — Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted. • http://dev2dev.bea.com/pub/advisory/171 •

CVSS: 7.5EPSS: 1%CPEs: 30EXPL: 0

CVE-2006-0430

https://notcve.org/view.php?id=CVE-2006-0430

25 Jan 2006 — Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown). • http://dev2dev.bea.com/pub/advisory/174 •

CVSS: 6.8EPSS: 1%CPEs: 42EXPL: 0

CVE-2005-4751

https://notcve.org/view.php?id=CVE-2005-4751

31 Dec 2005 — Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9.0, 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allow remote attackers to inject arbitrary web script or HTML and gain administrative privileges via unknown attack vectors. • http://dev2dev.bea.com/pub/advisory/139 •