CVE-2008-2579

Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors...

CVE-2008-2577

CVE-2008-2577 is an unspecified privilege-escalation issue in Oracle BEA WebLogic Server 9.2 MP1. Connected sources identify the vulnerability as affecting the WebLogic Console and WLST component, with the BEA/Oracle WebLogic Server entry listing “Console or WLST user” as the affected vector and ...

CVE-2008-2576

CVE-2008-2576 affects Oracle WebLogic Server (BEA Product Suite) 8.1 SP6 and 9.x line (9.0–9.2). The connected data describe a local vulnerability in WebLogic Server with unspecified impact; one Nessus entry characterizes a ForeignJMS-related information disclosure that requires authentication. T...

CVE-2008-2581

CVE-2008-2581 is an unspecified vulnerability in WebLogic Server (BEA/Oracle Product Suite) affecting multiple WebLogic releases (10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7) related to the UDDI Explorer component. The vulnerability is described as having unknown impact and remote attack vector...

CVE-2008-2580

CVE-2008-2580 corresponds to an unspecified information-disclosure vulnerability in Oracle BEA WebLogic Server product lines (10.0 MP1, 9.2 MP3, 9.1, 9.0). The BEA/Oracle risk matrix lists CVE-2008-2580 under WebLogic Server with remote HTTP access, high (CVSS v2) impact in some entries, indicati...

CVE-2008-2580

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors...

CVE-2008-2582

CVE-2008-2582 affects Oracle/BEA WebLogic Server (BEA Product Suite) versions 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, and 10.0 MP1. The initial description notes an unspecified vulnerability with unknown impact and remote attack vectors; the connected BEA/Oracle entries list the WebLogic components ...

CVE-2008-2576

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors...

CVE-2008-2581

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer...

CVE-2008-2578

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors...

CVE-2008-2577

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors...

CVE-2008-2579

Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors...

CVE-2008-2579

CVE-2008-2579 affects WebLogic Server Plugins for Apache, Sun and IIS web servers bundled with BEA/Oracle WebLogic, specifically in BEA Product Suite versions 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7. The vulnerability is described as unspecified with unknown impact, but multipl...

CVE-2008-2582

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors...

PT-2008-4033 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle BEA Product Suite versions 9.2 MP1 and 10.0 Description: The issue concerns an unspecified vulnerability in the WebLogic Server component, with unknown impact and local attack vectors. There is no information provided about the estimat...

PT-2008-4032 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle BEA Product Suite version 9.2 MP1 Description: The issue concerns an unspecified vulnerability in the WebLogic Server component. It has unknown impact and can be exploited through remote authenticated attack vectors. Recommendations: F...

ACROS Security: HTML Injection in BEA WebLogic Server Console (ASPR #2008-03-11-1)

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2008-03-11-1 ------------------------------------------------------------------------- ASPR 2008-03-11-1: HTML Injection in BEA WebLogic Server Console...

ACROS Security: Session Fixation Vulnerability in WebLogic Administration Console (#2008-03-11-2)

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2008-03-11-2 ------------------------------------------------------------------------- ASPR 2008-03-11-2: Session Fixation Vulnerability in WebLogic...

BEA WebLogic Server account locking bypass

It's possible to bruteforce username/password of locked account...

Default credentials

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not...