cbcvebase.
CVE-2003-0151
published 2003-03-24

CVE-2003-0151: BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which…

PriorityP434high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.95%
89.1th percentile
BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.

Affected

4 ranges
VendorProductVersion rangeFixed in
beaweblogic_server——
beaweblogic_server——
beaweblogic_server——
beaweblogic_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.