BEA : Security Vulnerabilities, CVEs, Published In 2008 (Information Leak)
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.
Max CVSS
7.1
EPSS Score
0.42%
Published
2008-02-22
Updated
2018-10-15
BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks.
Max CVSS
5.0
EPSS Score
0.29%
Published
2008-02-21
Updated
2011-03-08
2 vulnerabilities found