Total vulnerabilities in the database
BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.
| Software | From | Fixed in |
|---|---|---|
| bea / weblogic_server | 6.1 | 6.1.x |
| bea / weblogic_server | 6.1-sp1 | 6.1-sp1.x |
| bea / weblogic_server | 7.0 | 7.0.x |
| bea / weblogic_server | 7.0.0.1 | 7.0.0.1.x |