CVE-2001-0098: Bea WebLogic Server

High severity, CVSS 10.0. EPSS: 78.4% chance of exploitation in the next 30 days.

Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.

Affected products

• Bea WebLogic Server: up to and including 4.5.2

Published 2001-02-12. Last modified 2026-06-16.