Vulnerability Details : CVE-2003-1094
BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user, such as in the frequent use of JNDI initial contexts, which could allow remote authenticated users to gain privileges.
Products affected by CVE-2003-1094
- cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2003-1094
0.43%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 71 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2003-1094
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
References for CVE-2003-1094
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/12799
-
http://www.kb.cert.org/vuls/id/999788
Third Party Advisory;US Government Resource
-
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-35.jsp
-
http://www.securityfocus.com/bid/8320
Patch
Jump to