BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allow remote attackers to obtain sensitive information (intranet IP addresses) via unknown attack vectors involving "network address translation."
| Software | From | Fixed in |
|---|---|---|
| bea / weblogic_server | 8.1 | 8.1.x |
| bea / weblogic_server | 8.1-sp3 | 8.1-sp3.x |
| bea / weblogic_server | 8.1-sp1 | 8.1-sp1.x |
| bea / weblogic_server | 8.1-sp2 | 8.1-sp2.x |