BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks.
| Software | From | Fixed in |
|---|---|---|
| bea / weblogic_server | 9.0 | 9.0.x |
| bea / weblogic_server | 9.1 | 9.1.x |