Vulnerability Details CVE-2008-0900
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.08
EPSS Ranking 91.6%
CVSS Severity
CVSS v2 Score 6.0
References
- http://dev2dev.bea.com/pub/advisory/270
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019439
- http://www.vupen.com/english/advisories/2008/0612/references
- http://dev2dev.bea.com/pub/advisory/270
- http://secunia.com/advisories/29041
- http://www.securitytracker.com/id?1019439
- http://www.vupen.com/english/advisories/2008/0612/references
Products affected by CVE-2008-0900
-
cpe:2.3:a:bea:weblogic_server:10.0
-
cpe:2.3:a:bea:weblogic_server:8.1
-
cpe:2.3:a:bea:weblogic_server:9.2
-
cpe:2.3:a:bea_systems:weblogic_express:10.0
-
cpe:2.3:a:bea_systems:weblogic_express:9.2