CVE-2008-0898: Bea WebLogic Server

Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected distributed queues.

Affected products

• Bea WebLogic Server: version 9.0 only; version 9.1 only; version 9.2 only; version 10.0 only

Published 2008-02-22. Last modified 2026-06-16.