TU
Product
Tuxedo
5
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Tuxedo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-5576 | – | Oct 18 | BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain… Affected: 8.0; 8.1 |
| CVE-2003-0621 | – | Dec 1 | The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE… Affected: 6.3; 6.4; 6.5; 7.1; 8.0; 8.1 |
| CVE-2003-0622 | – | Dec 1 | The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such… Affected: 6.3; 6.4; 6.5; 7.1; 8.0; 8.1 |
| CVE-2003-0623 | – | Dec 1 | Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE… Affected: 6.3; 6.4; 6.5; 7.1; 8.0; 8.1 |
| CVE-2001-1477 | – | Dec 31 | The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to… Affected: 7.1 |
Showing 5