| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 3.1.8= 4.0= 4.5= 5.1 |
The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free