BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause looping stack overflow errors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Weblogic_server | Bea | 7.0-sp1 (including) | 7.0-sp1 (including) |
| Weblogic_server | Bea | 7.0-sp2 (including) | 7.0-sp2 (including) |
| Weblogic_server | Bea | 7.0-sp3 (including) | 7.0-sp3 (including) |
| Weblogic_server | Bea | 7.0-sp4 (including) | 7.0-sp4 (including) |
| Weblogic_server | Bea | 7.0-sp5 (including) | 7.0-sp5 (including) |
| Weblogic_server | Bea | 7.0-sp6 (including) | 7.0-sp6 (including) |
| Weblogic_server | Bea | 8.1-sp1 (including) | 8.1-sp1 (including) |
| Weblogic_server | Bea | 8.1-sp2 (including) | 8.1-sp2 (including) |
| Weblogic_server | Bea | 8.1-sp3 (including) | 8.1-sp3 (including) |
| Weblogic_server | Bea | 8.1-sp4 (including) | 8.1-sp4 (including) |