CVE-2008-0897

Published: Feb 22, 2008Modified: Apr 23, 2026

7.9

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:N

Exploitability: 6.8 / Impact: 9.2

Source: NVD

Description

Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.

Affected (5)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 10.0
Bea Weblogic Server	Version 9.0
Bea Weblogic Server	Version 9.1
Bea Weblogic Server	Version 9.2
Bea Weblogic Server	Version 9.2 mp1