BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Weblogic_server | Bea | * | 7.0 (including) |
| Weblogic_server | Bea | 7.0 (including) | 7.0 (including) |
| Weblogic_server | Bea | 8.1 (including) | 8.1 (including) |
| Weblogic_server | Bea | 8.1-sp5 (including) | 8.1-sp5 (including) |
| Weblogic_server | Bea | 9.0 (including) | 9.0 (including) |
| Weblogic_server | Bea | 9.1 (including) | 9.1 (including) |