Vulnerability Database

309,961

Total vulnerabilities in the database

CVE-2008-0900

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

  • Published: Feb 22, 2008
  • Updated: Nov 9, 2025
  • CVE: CVE-2008-0900
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
bea / weblogic_server 9.2 9.2.x
bea / weblogic_server 8.1-sp6 8.1-sp6.x
bea / weblogic_server 8.1-sp5 8.1-sp5.x
bea_systems / weblogic_express 10.0 10.0.x
bea / weblogic_server 8.1-sp4 8.1-sp4.x
bea / weblogic_server 10.0 10.0.x
bea / weblogic_server 9.2-mp1 9.2-mp1.x
bea_systems / weblogic_express 9.2-mp1 9.2-mp1.x