CVE-2008-0869

CVE-2008-0869 describes a cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 (SP6) and Workshop for WebLogic 9.0–10.0. The issue allows remote attackers to inject arbitrary web script/HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehiv...

CVE-2007-5576

BEA Tuxedo 8.0 prior to RP392 and 8.1 prior to RP293, and WebLogic Enterprise 5.1 prior to RP174, disclose passwords in cleartext via local commands (cnsbind, cnsunbind, cnsls), enabling physically proximate attackers to obtain sensitive information. Affected components: password handling in the ...

CVE-2007-2705

The CVE-2007-2705 entry describes a directory-traversal vulnerability in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, triggered when deployed in an exploded format. The issue resides in the Test View Console and allows remote attackers to list a WebLogic Work...

CVE-2008-0866

CVE-2008-0866 affects BEA WebLogic Workshop (via NetUI page flows) and is caused by cross-site scripting vulnerabilities where an invalid action URI is not properly handled, enabling injection of arbitrary script/HTML. The NVD entry documents the weakness and its CVSS v2 base score of 4.3 (Medium...