CVE-2008-0900

CVE-2008-0900 affects BEA WebLogic Server and Express versions 8.1 SP4–SP6, 9.2 MP1, and 10.0. The root cause is a session fixation vulnerability that allows remote authenticated users to hijack web sessions via unknown vectors. Affected components are web session handling functions in these BEA ...

CVE-2008-0903

CVE-2008-0903 affects BEA WebLogic Server and Express proxy plugin. A visible, unspecified vulnerability in these components (pre-November 2007, and pre-9.2 MP3/10.0 MP2) could be exploited remotely to cause a denial of service (web server crash) via a crafted URL. The connected records confirm t...