Описание
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
- Patch
- PatchVendor Advisory
- PatchVendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp1:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp2:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp3:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp4:express:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:9.0:sp5:express:*:*:*:*:*
EPSS
Процентиль: 23%
0.00078
Низкий
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.
EPSS
Процентиль: 23%
0.00078
Низкий
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other