NetSight
IP …
high7.5

CVE-2003-0151

BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which all…

Impact

BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.

Affected products

VendorProductAffected versions
BeaWeblogic Server
Versions 6.0, 6.1, 7.0, 7.0.0.1

References