PatchTheCVEweblogic workshop vulnerabilities and fixes
Recent CVEs affecting weblogic workshop, with upgrade or downgrade steps. 5 tracked.
Also searched as: weblogicworkshop.
weblogic workshop has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-10-14. Highest priority: CVE-2007-2705 (score 47/100).
- CVE-2008-4012 MEDIUM 5.1 DOWNGRADE Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote att
- CVE-2008-0869 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.
- CVE-2008-0866 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject
- CVE-2007-5576 MEDIUM 6.8 DOWNGRADE DOWNGRADE BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password
- CVE-2007-2705 HIGH 7.8 DOWNGRADE DOWNGRADE Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebL
FAQ
How do I fix weblogic workshop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is weblogic workshop being exploited right now?
None of the tracked weblogic workshop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which weblogic workshop CVE should I patch first?
CVE-2007-2705 currently ranks highest (47/100): Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebL.