BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Weblogic_server | Bea | 6.1 (including) | 6.1 (including) |
| Weblogic_server | Bea | 6.1-sp1 (including) | 6.1-sp1 (including) |
| Weblogic_server | Bea | 6.1-sp2 (including) | 6.1-sp2 (including) |
| Weblogic_server | Bea | 6.1-sp3 (including) | 6.1-sp3 (including) |
| Weblogic_server | Bea | 6.1-sp4 (including) | 6.1-sp4 (including) |
| Weblogic_server | Bea | 6.1-sp5 (including) | 6.1-sp5 (including) |
| Weblogic_server | Bea | 6.1-sp6 (including) | 6.1-sp6 (including) |
| Weblogic_server | Bea | 6.1-sp7 (including) | 6.1-sp7 (including) |
| Weblogic_server | Bea | 7.0-sp1 (including) | 7.0-sp1 (including) |
| Weblogic_server | Bea | 7.0-sp2 (including) | 7.0-sp2 (including) |
| Weblogic_server | Bea | 7.0-sp3 (including) | 7.0-sp3 (including) |
| Weblogic_server | Bea | 7.0-sp4 (including) | 7.0-sp4 (including) |
| Weblogic_server | Bea | 7.0-sp5 (including) | 7.0-sp5 (including) |
| Weblogic_server | Bea | 7.0-sp6 (including) | 7.0-sp6 (including) |
| Weblogic_server | Bea | 8.1 (including) | 8.1 (including) |
| Weblogic_server | Bea | 8.1-sp1 (including) | 8.1-sp1 (including) |
| Weblogic_server | Bea | 8.1-sp2 (including) | 8.1-sp2 (including) |
| Weblogic_server | Bea | 8.1-sp3 (including) | 8.1-sp3 (including) |
| Weblogic_server | Bea | 8.1-sp4 (including) | 8.1-sp4 (including) |