CVE-2003-0623: bea tuxedo

EPSS trend

Probability

1.46%

Chance of exploitation in the next 30 days

Percentile

73%

Versus all other CVEs

30-day change

0.00 pp

From 1.46% on 20-09-2026

20-09-202620-10-2026

EPSS score

1.46%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

References

4 links

exchange.xforce.ibmcloud.com/vulnerabilities/13561VDB EntryX Refsource XF
marc.info?l=bugtraq&m=106762000607681&w=2Mailing ListX Refsource BUGTRAQ
dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jspX Refsource CONFIRMPatchVendor Advisory
www.securityfocus.com/bid/8931VDB EntryX Refsource BIDExploitPatchVendor Advisory

Related vulnerabilities

CVE-2003-1438beaweblogic_server0.70%19y ago23-10-2007 01:00Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user.CVE-2003-1290beaweblogic_server2.37%20y ago13-01-2006 11:00BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface (JNDI).CVE-2003-0622beatuxedo+11.76%22y ago05-11-2003 05:00The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.CVE-2003-0621beatuxedo+18.05%22y ago05-11-2003 05:00The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.CVE-2003-0151beaweblogic_server3.95%23y ago21-03-2003 05:00BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.CVE-2003-0624beaweblogic_server3.81%22y ago05-11-2003 05:00Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.

All vulnerabilities intuxedo weblogic_server

CVE-2003-0623: bea tuxedo

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References