| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 10.0= 3.1.8= 4.0= 4.0.4= 4.5= 4.5.1= 4.5.2= 5.1= 6.0= 6.1= 7.0= 7.0.0.1= 8.1= 9.0= 9.1= 9.2 | |
| weblogic server | = 10.0_mp1 | |
| weblogic server | ≤ 10.3 |
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free