CVE-2008-0900

Published: Feb 22, 2008Modified: Apr 23, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

Affected (11)

Products: Bea: Weblogic Server · Bea Systems: Weblogic Express

1 product

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 10.0
Bea Weblogic Server	Version 8.1 sp4
Bea Weblogic Server	Version 8.1 sp4
Bea Weblogic Server	Version 8.1 sp5
Bea Weblogic Server	Version 8.1 sp5
Bea Weblogic Server	Version 8.1 sp6
Bea Weblogic Server	Version 8.1 sp6
Bea Weblogic Server	Version 9.2
Bea Weblogic Server	Version 9.2 mp1
Bea Systems Weblogic Express	Version 10.0
Bea Systems Weblogic Express	Version 9.2 mp1