Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2008-0897

Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.

  • Published: Feb 22, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-0897
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.9
  • AV:N/AC:M/Au:S/C:C/I:C/A:N

CWEs:

Software From Fixed in
bea / weblogic_server 9.0 9.0.x
bea / weblogic_server 9.2 9.2.x
bea / weblogic_server 9.1 9.1.x
bea / weblogic_server 10.0 10.0.x
bea / weblogic_server 9.2-mp1 9.2-mp1.x