CVE-2003-0624: Bea WebLogic Server

Medium severity, CVSS 4.3. EPSS: 3.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.

Affected products

• Bea WebLogic Server: up to and including 8.1; version 3.1.8 only

Published 2003-12-01. Last modified 2026-06-16.