| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 10.0= 8.1= 9.2 | |
| weblogic express | = 10.0= 9.2 |
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free