Unscored severity · published Feb 22, 2008
CVE-2008-0903
Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Weblogic Express · Bea Systems
through 10.0 · source: NVD
WS
Weblogic Server · Bea Systems
through 10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0903
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0903
Patch
http://dev2dev.bea.com/pub/advisory/275
secunia.com
http://secunia.com/advisories/29041
www.securitytracker.com
http://www.securitytracker.com/id?1019450
www.vupen.com
http://www.vupen.com/english/advisories/2008/0608/references
More from Weblogic Express
–
CVE-2008-0900
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via…