← Database

CVE-2008-0900

MEDIUM CVSS: 6.0 Published: 2008-02-22 Modified: 2026-06-16

Description

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

Affected Platforms

Bea Weblogic ServerBea Systems Weblogic Express

Weakness Type

CWE-264

References