cbcvebase.
CVE-2008-0902
published 2008-02-22

CVE-2008-0902: Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web…

PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.02%
59.2th percentile
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694.

Affected

7 ranges
VendorProductVersion rangeFixed in
beaweblogic_server——
beaweblogic_server——
beaweblogic_server——
beaweblogic_server——
beaweblogic_server——
beaweblogic_server——
bea_systemsweblogic_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.