| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 6.0= 6.1= 7.0= 7.0.0.1= 8.1 | |
| weblogic portal | = 8.0 |
The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service (cluster slowdown) via modified cookies.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free