CVEvulnerability

CVE-2003-0151

7.5 HIGH Published 2003-03-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-03-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.

Affected configurations

• bea weblogic server 6.0 • bea weblogic server 6.1 • bea weblogic server 7.0 • bea weblogic server 7.0.0.1

References