CVE Vulnerabilities

CVE-2003-0151

Published: Mar 24, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.

Affected Software

Name Vendor Start Version End Version
Weblogic_server Bea 6.0 6.0
Weblogic_server Bea 6.0 6.0
Weblogic_server Bea 6.0 6.0
Weblogic_server Bea 6.0 6.0
Weblogic_server Bea 6.0 6.0
Weblogic_server Bea 6.0 6.0
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 6.1 6.1
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0 7.0
Weblogic_server Bea 7.0.0.1 7.0.0.1
Weblogic_server Bea 7.0.0.1 7.0.0.1
Weblogic_server Bea 7.0.0.1 7.0.0.1
Weblogic_server Bea 7.0.0.1 7.0.0.1
Weblogic_server Bea 7.0.0.1 7.0.0.1
Weblogic_server Bea 7.0.0.1 7.0.0.1

References