[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-gdg_jTlqJfvrSD5yltyIqNUvisYgooTpvWoNzcDUFA":3,"g5a-risk:CVE-2008-0900":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":54,"references":55,"referencesCount":81,"weaknesses":82,"weaknessesCount":86,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":147,"notableEvents":148},"CVE-2008-0900","What is CVE-2008-0900?","Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.","Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack ...","2008-02-22T21:44:00","2026-06-16T22:50:34.163",6,"AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":4,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","SINGLE","PARTIAL","",null,6.8,6.4,false,[],0.09986,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,52],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"bea","weblogic_server","8.1","cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"9.2","cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"10.0","cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":43,"criteria":51,"vulnerable":4},"bea_systems","weblogic_express","cpe:2.3:a:bea_systems:weblogic_express:9.2:mp1:*:*:*:*:*:*",{"vendor":49,"product":50,"version":46,"criteria":53,"vulnerable":4},"cpe:2.3:a:bea_systems:weblogic_express:10.0:*:*:*:*:*:*:*",5,[56,61,65,69,73,75,77,79],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fdev2dev.bea.com\u002Fpub\u002Fadvisory\u002F270","Bea",[60],"Patch",{"url":62,"source":63,"tags":64},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F29041","Secunia",[],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1019439","Securitytracker",[],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2008\u002F0612\u002Freferences","Vupen",[],{"url":57,"source":58,"tags":74},[60],{"url":62,"source":63,"tags":76},[],{"url":66,"source":67,"tags":78},[],{"url":70,"source":71,"tags":80},[],8,[83],{"id":84,"name":84,"description":85},"Unknown","CWE-264",1,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2008-0900? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2008-0900, a medium severity cyber security vulnerability from 2008. Session fixation vulnerability in BEA WebLogic Server and ...","CVE-2008-0900, CVE-2008-0900 vulnerability, CVE-2008-0900 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, bea security, bea_systems security, weblogic_server vulnerability, weblogic_express vulnerability","\u002Fwhat-is\u002Fcve-2008-0900",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2008-0900","Cybersecurity","CVE-2008-0900, CVE-2008-0900 vulnerability, CVE-2008-0900 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":28,"Negate":28,"Nodes":115},[116],{"Operator":117,"Negate":31,"CPEMatch":118},"OR",[119,121,124,127,130,133,136,138,141,143,145],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":120,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0653ACAC-B0D9-4381-AB23-11D24852A414",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":123,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*","107C2FC6-BC60-4817-8A21-14C81DA6DEF5",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":126,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*","2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA",{"Vulnerable":4,"Criteria":128,"MatchCriteriaID":129,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*","24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7",{"Vulnerable":4,"Criteria":131,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*","7A75A7F9-A99A-4C8E-9867-71FA8A55DD70",{"Vulnerable":4,"Criteria":134,"MatchCriteriaID":135,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:bea:weblogic_server:8.1:sp6:express:*:*:*:*:*","715D1DD4-A736-4F55-9369-71C232AB14CC",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":137,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":140,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*","321BC193-5FBF-4F25-996D-1FE74779F34D",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":142,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"60F9ABCC-5217-4650-8C71-F8B0EB86789F",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":144,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FF045092-39D3-4598-99DA-D1B35F0DDC3C",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":146,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"61231482-5CC5-4C23-AA48-11E24FB6C94F",[],[],{"lastModified":11,"cacheTime":150,"version":22},1793199959356,{"score":152,"band":153,"action":154,"scoredAt":155},28,"Low","Monitor","2026-07-01T10:16:57.38063+00:00"]