Bea Systems Weblogic Express — known CVE vulnerabilities

Every CVE whose affected-product data names Bea Systems Weblogic Express, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2008-0900 — CVSS 6.0 (medium): Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote…
• CVE-2008-0903 — CVSS 4.3 (medium): Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and…