← Database

CVE-2008-0895

MEDIUM CVSS: 6.4 Published: 2008-02-22 Modified: 2026-06-16

Description

BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers.

Affected Platforms

Bea Weblogic Server

Weakness Type

CWE-287

References