Vendor/product archive

bea / weblogic_workshop CVEs

Beta · best-effort

4 CVEs tagged to bea / weblogic_workshop — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to bea vendor archive

CVE-2008-0866

Published Feb 21, 2008

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-0869

Published Feb 21, 2008

Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-5576

Published Oct 18, 2007

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain s…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-2705

Published May 16, 2007

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded form…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1