CVE-2008-0901

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been…

published February 22, 2008

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02242 · 82.7th percentile
Published
2008-02-22T21:00Z
EPSS history
Timeline
  • 22 FEB 21:00Z
    BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been…
    cvelistv5