[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9mAhB1E0S3lcke-MFN9dKqzzCqZYJPYv6fLyOtdBbjE":3,"g5a-ex:bea\u002Fweblogic_server@*":163,"g5a-family:bea\u002Fweblogic_server":165},{"success":4,"data":5},true,{"product":6,"versions":66,"topVulnerabilitiesByEpss":85,"kevVulnerabilities":140,"seoMetadata":141,"meta":160},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":65},"bea","weblogic_server",18,150,0,"2010-07-13",[14,18,21,24,27,29,31,33,36,38,41,44,47,50,53,56,59,62],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0",10,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"3.1.8",5,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"4.0",2,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"4.0.4",3,{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},"4.2",{"version":30,"cve_count":23,"kev_count":11,"has_kev":17},"4.5",{"version":32,"cve_count":26,"kev_count":11,"has_kev":17},"4.5.1",{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},"4.5.2",1,{"version":37,"cve_count":26,"kev_count":11,"has_kev":17},"5.0.1",{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},"5.1",13,{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},"6.0",17,{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},"6.1",53,{"version":48,"cve_count":49,"kev_count":11,"has_kev":17},"7.0",94,{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},"7.0.0.1",26,{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},"8.1",97,{"version":57,"cve_count":58,"kev_count":11,"has_kev":17},"9.0",38,{"version":60,"cve_count":61,"kev_count":11,"has_kev":17},"9.1",28,{"version":63,"cve_count":64,"kev_count":11,"has_kev":17},"9.2",15,"Weblogic Server by Bea is a technology product with 18 tracked versions and 150 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},{"version":30,"cve_count":23,"kev_count":11,"has_kev":17},{"version":32,"cve_count":26,"kev_count":11,"has_kev":17},{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},{"version":37,"cve_count":26,"kev_count":11,"has_kev":17},{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},{"version":48,"cve_count":49,"kev_count":11,"has_kev":17},{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},{"version":57,"cve_count":58,"kev_count":11,"has_kev":17},{"version":60,"cve_count":61,"kev_count":11,"has_kev":17},{"version":63,"cve_count":64,"kev_count":11,"has_kev":17},[86,93,98,105,110,116,120,123,130,135],{"cveId":87,"description":88,"publishedDate":89,"cvssScore":16,"cvssVersion":90,"severity":91,"isKev":17,"epssScore":92},"CVE-2008-3257","Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \"POST \u002F.jsp\" in an HTTP request.","2008-07-22","v2","Critical",0.83589,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":16,"cvssVersion":90,"severity":91,"isKev":17,"epssScore":97},"CVE-2001-0098","Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a \"..\"  string.","2001-02-12",0.78371,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":90,"severity":103,"isKev":17,"epssScore":104},"CVE-2004-0204","Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via \"..\" sequences in the dynamicimag argument to crystalimagehandler.aspx.","2004-08-06",7.5,"High",0.72993,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":16,"cvssVersion":90,"severity":91,"isKev":17,"epssScore":109},"CVE-2000-0681","Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.","2000-10-20",0.50858,{"cveId":111,"description":112,"publishedDate":113,"cvssScore":114,"cvssVersion":90,"severity":103,"isKev":17,"epssScore":115},"CVE-2007-2699","The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.","2007-05-16",7.1,0.30876,{"cveId":117,"description":118,"publishedDate":108,"cvssScore":16,"cvssVersion":90,"severity":91,"isKev":17,"epssScore":119},"CVE-2000-0685","BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.",0.1226,{"cveId":121,"description":122,"publishedDate":108,"cvssScore":16,"cvssVersion":90,"severity":91,"isKev":17,"epssScore":119},"CVE-2000-0684","BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.",{"cveId":124,"description":125,"publishedDate":126,"cvssScore":127,"cvssVersion":90,"severity":128,"isKev":17,"epssScore":129},"CVE-2008-0900","Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.","2008-02-22",6,"Medium",0.09986,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":20,"cvssVersion":90,"severity":128,"isKev":17,"epssScore":134},"CVE-2002-0106","BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.","2002-03-25",0.07092,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":20,"cvssVersion":90,"severity":128,"isKev":17,"epssScore":139},"CVE-2003-0621","The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.","2003-12-01",0.06926,[],{"title":142,"metaDescription":143,"keywords":144,"structuredData":145},"Weblogic Server by Bea - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Weblogic Server by Bea covering 18 versions with 150 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Weblogic Server vulnerabilities, Weblogic Server security, Weblogic Server CVE, Bea Weblogic Server, Weblogic Server threat intelligence, Bea security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":146,"@type":147,"name":148,"description":143,"url":149,"manufacturer":150,"applicationCategory":154,"softwareVersion":155,"mainEntity":156},"https:\u002F\u002Fschema.org","SoftwareApplication","Weblogic Server","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fbea\u002Fweblogic_server",{"@type":151,"name":152,"url":153},"Organization","Bea","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fbea","Security Software","18 versions tracked",{"@type":157,"name":158,"description":159,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Weblogic Server Security Vulnerabilities","Security vulnerabilities affecting Weblogic Server by Bea",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":161,"apiVersion":162},"2026-10-28T18:17:31.651Z","3.0",{"rows":164,"total":11,"capped":17,"failed":11},[],[]]