CVE-2008-0902

BEA Weblogic Server - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694.

References (3)

Scores

EPSS 0.0025
EPSS Percentile 48.4%

Classification

CWE
CWE-79
Status draft

Affected Products (27)

bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
bea/weblogic_server
... and 12 more

Timeline

Published Feb 22, 2008
Tracked Since Feb 18, 2026