PatchTheCVEbea systems vulnerabilities
Recent CVEs affecting bea systems products. 14 tracked.
bea systems has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-07-13. Highest priority: CVE-2008-3257 (score 70/100).
- CVE-2010-2375 MEDIUM 6.4 DOWNGRADE DOWNGRADE Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Serve
- CVE-2008-3257 HIGH 10.0 DOWNGRADE MITIGATE Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic
- CVE-2008-0904 HIGH 7.8 DOWNGRADE DOWNGRADE Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic
- CVE-2008-0903 MEDIUM 4.3 UPGRADE UPGRADE Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November
- CVE-2008-0902 MEDIUM 4.3 DOWNGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 al
- CVE-2008-0901 HIGH 7.1 DOWNGRADE DOWNGRADE BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guess
- CVE-2008-0900 MEDIUM 6.0 DOWNGRADE DOWNGRADE Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10
- CVE-2008-0896 MEDIUM 4.9 DOWNGRADE BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content por
- CVE-2008-0870 HIGH 7.5 DOWNGRADE DOWNGRADE BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user
- CVE-2008-0869 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.
- CVE-2008-0868 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance
- CVE-2008-0867 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and
- CVE-2008-0865 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlement
- CVE-2008-0864 MEDIUM 5.0 DOWNGRADE DOWNGRADE Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an
FAQ
How do I fix bea systems vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bea systems being exploited right now?
None of the tracked bea systems CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bea systems CVE should I patch first?
CVE-2008-3257 currently ranks highest (70/100): Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic .