Bea Systems Weblogic Express vulnerabilities

2 vulnerabilities

Known vulnerabilities in Bea Systems Weblogic Express, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2008-0903bea_systemsweblogic_express+1
EPSS score
1.19%
Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL.6CVE-2008-0900bea_systemsweblogic_express+1
EPSS score
9.99%
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.