CVE-2003-1095: Bea WebLogic Server

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate.

Affected products

• Bea WebLogic Server: version 7.0 only; version 7.0.0.1 only

Published 2003-03-18. Last modified 2026-06-16.