Bea Weblogic Workshop — known CVE vulnerabilities

Every CVE whose affected-product data names Bea Weblogic Workshop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2007-2705 — CVSS 7.8 (high): Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through…
• CVE-2007-5576 — CVSS 6.8 (medium): BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows…
• CVE-2008-0866 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML…
• CVE-2008-0869 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote…