CVE-2007-2694

概要

参考情報

• dev2dev.bea.com/pub/advisory/232 · Patch
• osvdb.org/36075
• secunia.com/advisories/25284 · Vendor Advisory
• vupen.com/english/advisories/2007/1815

weblogic server のその他の脆弱性

• CVE-2010-2375中 6.4Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion M…
• CVE-2008-3257緊急 10.0Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allow…
• CVE-2008-0902中 4.3Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject…
• CVE-2008-0901高 7.1BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account…
• CVE-2008-0900中 6.0Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated…