CVE-2007-5576

BEA Tuxedo 8.0 prior to RP392 and 8.1 prior to RP293, and WebLogic Enterprise 5.1 prior to RP174, disclose passwords in cleartext via local commands (cnsbind, cnsunbind, cnsls), enabling physically proximate attackers to obtain sensitive information. Affected components: password handling in the ...

CVE-2002-2142

Technical details (affected products, versions, root cause, remediation) are not publicly provided in the connected documents; monitor for updates.

CVE-2007-2705

The CVE-2007-2705 entry describes a directory-traversal vulnerability in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, triggered when deployed in an exploded format. The issue resides in the Test View Console and allows remote attackers to list a WebLogic Work...

CVE-2003-0733

The CVE-2003-0733 entry describes multiple cross-site scripting (XSS) vulnerabilities affecting WebLogic products: WebLogic Integration 7.0/2.0, Liquid Data 1.1, and WebLogic Server/Express 5.1–7.0. The root cause is XSS in the WebLogic Console and related servlet handling, allowing remote attack...