BEA Systems WebLogic Workshop 8.1 SP5

CPE Details

BEA Systems WebLogic Workshop 8.1 SP5
bea
weblogic_workshop
8.1
2007-08-23
19h16 +00:00
2008-04-07
11h42 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:bea:weblogic_workshop:8.1:sp5:*:*:*:*:*:*

Informations

Vendor

bea

Product

weblogic_workshop

Version

8.1

Update

sp5

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2008-0866 2008-02-21 00h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows.
4.3
CVE-2008-0869 2008-02-21 00h00 +00:00 Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with page flows.
4.3
CVE-2007-5576 2007-10-18 19h00 +00:00 BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.
6.8
CVE-2007-2705 2007-05-15 23h00 +00:00 Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.
7.8