| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 6.0= 6.1= 7.0= 7.0.0.1= 8.1 | |
| weblogic portal | = 8.0 |
BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free