| Package | Affected versions | Patched versions |
|---|---|---|
| tuxedo | = 6.3= 6.4= 6.5= 7.1= 8.0= 8.1 | |
| weblogic server | = 4.2= 5.0.1= 5.1 |
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free