Lucene search
HistoryMar 24, 2003 - 5:00 a.m.
CVE-2003-0151
cve-2003-0151
bea weblogic server
access restriction
servlets
administrative functions
remote attackers
arbitrary files
code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.083 Low
EPSS
Percentile
94.4%
BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.
Affected configurations
Node
beaweblogic_serverMatch6.0
ORbeaweblogic_serverMatch6.0express
ORbeaweblogic_serverMatch6.0sp1
ORbeaweblogic_serverMatch6.0sp1express
ORbeaweblogic_serverMatch6.0sp2
ORbeaweblogic_serverMatch6.0sp2express
ORbeaweblogic_serverMatch6.1
ORbeaweblogic_serverMatch6.1express
ORbeaweblogic_serverMatch6.1sp1
ORbeaweblogic_serverMatch6.1sp1express
ORbeaweblogic_serverMatch6.1sp2
ORbeaweblogic_serverMatch6.1sp2express
ORbeaweblogic_serverMatch6.1sp3
ORbeaweblogic_serverMatch6.1sp3express
ORbeaweblogic_serverMatch6.1sp4
ORbeaweblogic_serverMatch6.1sp4express
ORbeaweblogic_serverMatch7.0
ORbeaweblogic_serverMatch7.0express
ORbeaweblogic_serverMatch7.0sp1
ORbeaweblogic_serverMatch7.0sp1express
ORbeaweblogic_serverMatch7.0sp2
ORbeaweblogic_serverMatch7.0sp2express
ORbeaweblogic_serverMatch7.0.0.1
ORbeaweblogic_serverMatch7.0.0.1express
ORbeaweblogic_serverMatch7.0.0.1sp1
ORbeaweblogic_serverMatch7.0.0.1sp1express
ORbeaweblogic_serverMatch7.0.0.1sp2
ORbeaweblogic_serverMatch7.0.0.1sp2express
Related
nvd
nvd
CVE-2003-0151
2003-03-24 05:00:00
cvelist
cvelist
CVE-2003-0151
2003-03-21 05:00:00
nessus
nessus
WebLogic Servlets Multiple Vulnerabilities
2003-03-27 00:00:00
openvas
openvas
BEA WebLogic Management Servlet Multiple Vulnerabilities (BEA03-28)
2005-11-03 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.083 Low
EPSS
Percentile
94.4%
Related for CVE-2003-0151