[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fa95jdZimA09v2WDBd2Yal5wvBX3y9vzdTCepsxVx9PI":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":48,"kevVulnerabilities":100,"topProductsByCves":101,"seoMetadata":110,"meta":119},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":47},3283,"bea_systems",8,14,0,15,"2010-07-13","b",[16,22,26,29,32,37,40,43],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},13206,"weblogic_portal",3,5,"2008-02-22",{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":13},13207,"weblogic_server",2,{"id":27,"product_name":28,"version_count":19,"cve_count":25,"kev_count":11,"last_cve_update":21},13201,"aqualogic_interaction",{"id":30,"product_name":31,"version_count":25,"cve_count":25,"kev_count":11,"last_cve_update":21},13205,"weblogic_express",{"id":33,"product_name":34,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},13204,"weblogic",1,"2008-02-21",{"id":38,"product_name":39,"version_count":19,"cve_count":35,"kev_count":11,"last_cve_update":21},13202,"plumtree_collaboration",{"id":41,"product_name":42,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},13203,"plumtree_foundation",{"id":44,"product_name":45,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":46},13200,"apache_connector_in_weblogic_server","2008-07-22","Bea_systems is a technology vendor with 8 tracked products and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[49,57,63,68,74,78,81,86,91,96],{"cveId":50,"description":51,"publishedDate":46,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":55,"epssScore":56},"CVE-2008-3257","Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \"POST \u002F.jsp\" in an HTTP request.",10,"v2","Critical",false,0.83589,{"cveId":58,"description":59,"publishedDate":21,"cvssScore":60,"cvssVersion":53,"severity":61,"isKev":55,"epssScore":62},"CVE-2008-0900","Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.",6,"Medium",0.09986,{"cveId":64,"description":65,"publishedDate":13,"cvssScore":66,"cvssVersion":53,"severity":61,"isKev":55,"epssScore":67},"CVE-2010-2375","Package\u002FPrivilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.",6.4,0.06509,{"cveId":69,"description":70,"publishedDate":21,"cvssScore":71,"cvssVersion":53,"severity":72,"isKev":55,"epssScore":73},"CVE-2008-0901","BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.",7.1,"High",0.02242,{"cveId":75,"description":76,"publishedDate":36,"cvssScore":20,"cvssVersion":53,"severity":61,"isKev":55,"epssScore":77},"CVE-2008-0864","Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.",0.0181,{"cveId":79,"description":80,"publishedDate":36,"cvssScore":20,"cvssVersion":53,"severity":61,"isKev":55,"epssScore":77},"CVE-2008-0865","Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors.",{"cveId":82,"description":83,"publishedDate":21,"cvssScore":84,"cvssVersion":53,"severity":72,"isKev":55,"epssScore":85},"CVE-2008-0904","Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.",7.8,0.01471,{"cveId":87,"description":88,"publishedDate":36,"cvssScore":89,"cvssVersion":53,"severity":72,"isKev":55,"epssScore":90},"CVE-2008-0870","BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:\u002F\u002F URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session.",7.5,0.01431,{"cveId":92,"description":93,"publishedDate":36,"cvssScore":94,"cvssVersion":53,"severity":61,"isKev":55,"epssScore":95},"CVE-2008-0867","Cross-site scripting (XSS) vulnerability in portal\u002Fserver.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.",4.3,0.01223,{"cveId":97,"description":98,"publishedDate":21,"cvssScore":94,"cvssVersion":53,"severity":61,"isKev":55,"epssScore":99},"CVE-2008-0903","Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL.",0.01189,[],[102,103,104,105,106,107,108,109],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":27,"product_name":28,"version_count":19,"cve_count":25,"kev_count":11,"last_cve_update":21},{"id":30,"product_name":31,"version_count":25,"cve_count":25,"kev_count":11,"last_cve_update":21},{"id":33,"product_name":34,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":19,"cve_count":35,"kev_count":11,"last_cve_update":21},{"id":41,"product_name":42,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},{"id":44,"product_name":45,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":46},{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Bea_systems - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Bea_systems covering 8 products with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Bea_systems vulnerabilities, Bea_systems security, Bea_systems CVE, Bea_systems threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":115,"@type":116,"name":117,"description":112,"url":118},"https:\u002F\u002Fschema.org","Organization","Bea_systems","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fbea_systems",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":120,"apiVersion":121},"2026-10-28T15:17:28.418Z","3.0"]