CVE-2007-2696

The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server...

CVE-2007-2701: Undefined Security Weakness

The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a username and password, or when the connection URL is not defined, allows remote attackers to bypass the security access policy and "send unauthorized messages to a protected...

CVE-2007-2696: Undefined Security Weakness

The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server...

CVE-2007-1944

The Java Message Service JMS in IBM WebSphere Application Server WAS before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release of a bytebuffer input stream," possibly a double free vulnerability...

CVE-2007-1944

The Java Message Service JMS in IBM WebSphere Application Server WAS before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release of a bytebuffer input stream," possibly a double free vulnerability...

CVE-2007-1944

The CVE-2007-1944 entry affects IBM WebSphere Application Server (WAS) JMS prior to 6.1.0.7. The vulnerability stems from a double release of a bytebuffer input stream, possibly causing a double-free and denial of service (partial availability impact). Affected product/version: WebSphere Applicat...

CVE-2007-1944: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Java Message Service JMS in IBM WebSphere Application Server WAS before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release of a bytebuffer input stream," possibly a double free vulnerability...

CVE-2003-1222

BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service JMS provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password...

CVE-2003-1222

CVE-2003-1222 affects BEA WebLogic Express/Server 8.0–8.1 SP1 when using a foreign JMS provider. The underlying issue is that the system echoes the foreign provider password to the console and stores it in cleartext in config.xml, enabling an attacker to obtain the password. The description does ...

CVE-2003-1222: Undefined Security Weakness

BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service JMS provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password...

CVE-2003-1093

BEA WebLogic Server versions 6.1, 7.0 and 7.0.0.1 expose a vulnerability where, when routing messages to a JMS target domain that is inaccessible, a ResourceAllocationException may cause the user’s password to be leaked. The issue affects the JMS routing path and has partial impact on confidentia...

CVE-2003-1093

BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException...

CVE-2003-1093: Undefined Security Weakness

BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException...

CVE-2003-1093

BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException...