Description
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694.
References (3)
Core 3
Core References
Patch vendor-advisory
x_refsource_bea
http://dev2dev.bea.com/pub/advisory/273
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29041
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0612/references
Scores
EPSS
0.0028
EPSS Percentile
51.3%
Details
CWE
CWE-79
Status
published
Products (7)
bea/weblogic_server
6.1 (8 CPE variants)
bea/weblogic_server
7.0 (8 CPE variants)
bea/weblogic_server
8.1 (7 CPE variants)
bea/weblogic_server
9.0 ga
bea/weblogic_server
9.1 ga
bea/weblogic_server
10.0
bea_systems/weblogic_server
10.0_mp1
Published
Feb 22, 2008
Tracked Since
Feb 18, 2026