PatchTheCVEweblogic integration vulnerabilities and fixes
Recent CVEs affecting weblogic integration, with upgrade or downgrade steps. 4 tracked.
Also searched as: weblogicintegration.
weblogic integration has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-10-18. Highest priority: CVE-2007-2705 (score 47/100).
- CVE-2007-5576 MEDIUM 6.8 DOWNGRADE DOWNGRADE BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password
- CVE-2007-2705 HIGH 7.8 DOWNGRADE DOWNGRADE Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebL
- CVE-2003-0733 MEDIUM 6.8 DOWNGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and
- CVE-2002-2142 HIGH 7.5 DOWNGRADE DOWNGRADE An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogi
FAQ
How do I fix weblogic integration vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is weblogic integration being exploited right now?
None of the tracked weblogic integration CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which weblogic integration CVE should I patch first?
CVE-2007-2705 currently ranks highest (47/100): Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebL.