Total vulnerabilities in the database
BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods.
| Software | From | Fixed in |
|---|---|---|
| bea / weblogic_server | - | 8.1.x |
| bea / weblogic_server | 8.1 | 8.1.x |
| bea / weblogic_server | 9.0 | 9.0.x |
| bea / weblogic_server | 7.0 | 7.0.x |
| bea / weblogic_server | 9.1 | 9.1.x |
| bea / weblogic_server | - | 7.0.x |