[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foSU1s9VQ_lNMufVsb2gxXCtZTyhAlSiT7Zo-Mhk1dCk":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":98,"kevVulnerabilities":155,"topProductsByCves":156,"seoMetadata":167,"meta":176},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":97},3259,"bea",22,159,0,62,"2010-07-13","b",[16,21,27,33,36,41,45,50,54,57,60,64,67,70,73,76,79,82,85,88,91,94],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},13173,"weblogic_server",18,150,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},13168,"tuxedo",7,5,"2007-10-18",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},13174,"weblogic_workshop",1,4,"2008-02-21",{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":26},13169,"weblogic_integration",{"id":37,"product_name":38,"version_count":25,"cve_count":39,"kev_count":11,"last_cve_update":40},13155,"aqualogic_interaction",2,"2007-12-01",{"id":42,"product_name":43,"version_count":31,"cve_count":39,"kev_count":11,"last_cve_update":44},13160,"aqualogic_service_bus","2007-01-23",{"id":46,"product_name":47,"version_count":48,"cve_count":30,"kev_count":11,"last_cve_update":49},13170,"weblogic_mobility_server",3,"2007-12-15",{"id":51,"product_name":52,"version_count":30,"cve_count":30,"kev_count":11,"last_cve_update":53},13166,"liquid_data","2003-10-20",{"id":55,"product_name":56,"version_count":30,"cve_count":30,"kev_count":11,"last_cve_update":44},13162,"jrockit",{"id":58,"product_name":59,"version_count":48,"cve_count":30,"kev_count":11,"last_cve_update":44},13154,"aqualogic_enterprise_security",{"id":61,"product_name":62,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13171,"weblogic_platform",null,{"id":65,"product_name":66,"version_count":48,"cve_count":11,"kev_count":11,"last_cve_update":63},13172,"weblogic_portal",{"id":68,"product_name":69,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13164,"jrockit_jre",{"id":71,"product_name":72,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13156,"aqualogic_interaction_collaboration",{"id":74,"product_name":75,"version_count":39,"cve_count":11,"kev_count":11,"last_cve_update":63},13157,"aqualogic_interaction_content_service_for_windows_files",{"id":77,"product_name":78,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13158,"aqualogic_interaction_identity_service_for_ldap",{"id":80,"product_name":81,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13159,"aqualogic_.net_portlet_toolkit",{"id":83,"product_name":84,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13161,"jolt",{"id":86,"product_name":87,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13163,"jrockit_jdk",{"id":89,"product_name":90,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13153,"aqualogic_analytics",{"id":92,"product_name":93,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13165,"jrockit_mission_control",{"id":95,"product_name":96,"version_count":30,"cve_count":11,"kev_count":11,"last_cve_update":63},13167,"logging_utilities","Bea is a technology vendor with 22 tracked products and 159 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[99,108,113,120,125,131,135,138,145,150],{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":104,"severity":105,"isKev":106,"epssScore":107},"CVE-2008-3257","Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \"POST \u002F.jsp\" in an HTTP request.","2008-07-22",10,"v2","Critical",false,0.83589,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":103,"cvssVersion":104,"severity":105,"isKev":106,"epssScore":112},"CVE-2001-0098","Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a \"..\"  string.","2001-02-12",0.78371,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":104,"severity":118,"isKev":106,"epssScore":119},"CVE-2004-0204","Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via \"..\" sequences in the dynamicimag argument to crystalimagehandler.aspx.","2004-08-06",7.5,"High",0.72368,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":103,"cvssVersion":104,"severity":105,"isKev":106,"epssScore":124},"CVE-2000-0681","Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.","2000-10-20",0.50858,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":104,"severity":118,"isKev":106,"epssScore":130},"CVE-2007-2699","The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.","2007-05-16",7.1,0.29305,{"cveId":132,"description":133,"publishedDate":123,"cvssScore":103,"cvssVersion":104,"severity":105,"isKev":106,"epssScore":134},"CVE-2000-0685","BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.",0.1226,{"cveId":136,"description":137,"publishedDate":123,"cvssScore":103,"cvssVersion":104,"severity":105,"isKev":106,"epssScore":134},"CVE-2000-0684","BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.",{"cveId":139,"description":140,"publishedDate":141,"cvssScore":142,"cvssVersion":104,"severity":143,"isKev":106,"epssScore":144},"CVE-2008-0900","Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.","2008-02-22",6,"Medium",0.09986,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":25,"cvssVersion":104,"severity":143,"isKev":106,"epssScore":149},"CVE-2003-0621","The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.","2003-12-01",0.08048,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":25,"cvssVersion":104,"severity":143,"isKev":106,"epssScore":154},"CVE-2002-0106","BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.","2002-03-25",0.07092,[],[157,158,159,160,161,162,163,164,165,166],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":26},{"id":37,"product_name":38,"version_count":25,"cve_count":39,"kev_count":11,"last_cve_update":40},{"id":42,"product_name":43,"version_count":31,"cve_count":39,"kev_count":11,"last_cve_update":44},{"id":46,"product_name":47,"version_count":48,"cve_count":30,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":30,"cve_count":30,"kev_count":11,"last_cve_update":53},{"id":55,"product_name":56,"version_count":30,"cve_count":30,"kev_count":11,"last_cve_update":44},{"id":58,"product_name":59,"version_count":48,"cve_count":30,"kev_count":11,"last_cve_update":44},{"title":168,"metaDescription":169,"keywords":170,"structuredData":171},"Bea - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Bea covering 22 products with 159 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Bea vulnerabilities, Bea security, Bea CVE, Bea threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":172,"@type":173,"name":174,"description":169,"url":175},"https:\u002F\u002Fschema.org","Organization","Bea","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fbea",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":177,"apiVersion":178},"2026-10-28T17:31:25.195Z","3.0"]