| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic server | = 9.0= 9.1 |
The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free