CVE-2002-2177: Bea WebLogic Server

Low severity, CVSS 2.6. EPSS: 1.4% chance of exploitation in the next 30 days.

BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only; version 7.0.0.1 only

Published 2002-12-31. Last modified 2026-06-16.