BS
Vendor
Bea Systems
18
CVEs
0
On KEV
0
New 30D
Products
WP–
Weblogic Portal
Bea Systems
5 CVEs0 on KEV0 new
WS–
Weblogic Server
Bea Systems
5 CVEs0 on KEV0 new
AI–
Aqualogic Interaction
Bea Systems
2 CVEs0 on KEV0 new
WE–
Weblogic Express
Bea Systems
2 CVEs0 on KEV0 new
AC–
Apache Connector IN Weblogic Server
Bea Systems
1 CVEs0 on KEV0 new
PC–
Plumtree Collaboration
Bea Systems
1 CVEs0 on KEV0 new
PF–
Plumtree Foundation
Bea Systems
1 CVEs0 on KEV0 new
WE–
Weblogic
Bea Systems
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2010-2375 | WS Weblogic Server Bea Systems | – | Jul 13 | Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1,… |
| CVE-2008-3257 | AC Apache Connector IN Weblogic Server Bea Systems | – | Jul 22 | Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary… |
| CVE-2008-0900 | WE Weblogic Express Bea Systems | – | Feb 22 | Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via… |
| CVE-2008-0896 | WP Weblogic Portal Bea Systems | – | Feb 22 | BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which… |
| CVE-2008-0901 | WS Weblogic Server Bea Systems | – | Feb 22 | BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via… |
| CVE-2008-0902 | WS Weblogic Server Bea Systems | – | Feb 22 | Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via… |
| CVE-2008-0903 | WE Weblogic Express Bea Systems | – | Feb 22 | Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to… |
| CVE-2008-0904 | AI Aqualogic Interaction Bea Systems | – | Feb 22 | Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary… |
| CVE-2008-0867 | AI Aqualogic Interaction Bea Systems | – | Feb 21 | Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject… |
| CVE-2008-0868 | WP Weblogic Portal Bea Systems | – | Feb 21 | Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web… |
| CVE-2008-0869 | WE Weblogic Bea Systems | – | Feb 21 | Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script… |
| CVE-2008-0870 | WP Weblogic Portal Bea Systems | – | Feb 21 | BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an… |
| CVE-2008-0865 | WP Weblogic Portal Bea Systems | – | Feb 21 | Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors |
| CVE-2008-0864 | WP Weblogic Portal Bea Systems | – | Feb 21 | Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow… |