Bea Weblogic Server Vulnérabilités

Chronologie

Version

8.146
8.038
7.020
9.016
6.116

Contre-mesures

Official Fix26
Temporary Fix0
Workaround6
Unavailable0
Not Defined92

Exploitabilité

High2
Functional0
Proof-of-Concept62
Unproven0
Not Defined60

Vecteur d'accès

Not Defined0
Physical0
Local30
Adjacent0
Network94

Authentification

Not Defined0
High0
Low20
None104

Interaction de l'utilisateur

Not Defined0
Required8
None116

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤422
≤512
≤646
≤712
≤820
≤92
≤108

CVSSv3 Temp

≤10
≤20
≤32
≤422
≤532
≤632
≤714
≤812
≤92
≤108

VulDB

≤10
≤20
≤32
≤422
≤512
≤646
≤712
≤820
≤92
≤108

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k0
<10k36
<25k52
<50k36
<100k0
≥100k0

Exploiter aujourd'hui

<1k98
<2k14
<5k10
<10k2
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Versions (24): 3.1.8, 4.0.4, 4.5, 4.5.1, 4.5.2, 5.0, 5.1, 6.0, 6.1, 6.1 SP2, 6.1 SP 2, 7, 7.0, 7.0 SP 1, 7.0 SP3, 7.0.0.1, 7.0.0.1 SP 1, 8.0, 8.1, 8.1 SP1, 8.1 SP2, 9.0, 9.1, 10.0

Link to Product Website: https://www.oracle.com/corporate/acquisitions/bea/

Type de logiciel: Application Server Software

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
22/07/200810.010.0BEA WebLogic Server mod_wl .jsp buffer overflow$25k-$100k$0-$5kHighNot Defined0.00CVE-2008-3257
22/02/20085.34.8BEA WebLogic Server dénie de service$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2008-0903
22/02/20084.34.1BEA WebLogic Server cross site scripting$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-0902
22/02/20087.57.1BEA WebLogic Server elévation de privilèges$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-0901
22/02/20086.36.0BEA WebLogic Server elévation de privilèges$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-0900
22/02/20084.34.1BEA WebLogic Server Administration Console cross site scripting$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-0899
22/02/20086.56.2BEA WebLogic Server Access Restriction elévation de privilèges$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-0898
22/02/20088.17.7BEA WebLogic Server Access Restriction elévation de privilèges$5k-$25k$0-$5kProof-of-ConceptNot Defined0.02CVE-2008-0897
22/02/20086.56.2BEA WebLogic Server authentification faible$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-0895
20/02/20085.35.0BEA WebLogic Server divulgation de l'information$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-0863
30/08/20076.56.2BEA WebLogic Server divulgation de l'information$5k-$25k$0-$5kHighOfficial Fix0.00CVE-2007-4616
30/08/20076.56.2BEA WebLogic Server vulnérabilité inconnue$5k-$25k$5k-$25kProof-of-ConceptNot Defined0.00CVE-2007-4615
28/08/20077.56.5BEA WebLogic Server dénie de service$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2007-4618
28/08/20077.57.1BEA WebLogic Server dénie de service$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-4617
23/05/20077.57.1BEA WebLogic Server Administration Console Privilege Escalation$25k-$100k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2699
14/05/20075.95.6BEA WebLogic Server dénie de service$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2704
14/05/20075.04.7BEA WebLogic Server Privilege Escalation$25k-$100k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2701
14/05/20074.34.1BEA WebLogic Server Configuration File divulgation de l'information$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2700
14/05/20075.35.0BEA WebLogic Server Administration Console chiffrement faible$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2698
14/05/20075.65.3BEA WebLogic Server dénie de service$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2697
14/05/20077.36.9BEA WebLogic Server Remote Code Execution$25k-$100k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2696
14/05/20075.65.3BEA WebLogic Server Remote Code Execution$25k-$100k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2695
14/05/20074.34.1BEA WebLogic Server cross site scripting$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-2694
22/01/20073.33.2BEA WebLogic Server divulgation de l'information$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-0409
17/01/20075.35.0BEA WebLogic Server divulgation de l'information$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2007-0420

99 plus d'entrées ne sont pas affichées

plus d'entrées par Bea

Interested in the pricing of exploits?

See the underground prices here!