CVE-2003-0151: Bea WebLogic Server

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.

Affected products

• Bea WebLogic Server: version 6.0 only; version 6.1 only; version 7.0 only; version 7.0.0.1 only

Published 2003-03-24. Last modified 2026-06-16.