CVE-2008-0903: Bea Systems WebLogic Express

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL.

Affected products

• Bea Systems WebLogic Express: up to and including 10.0
• Bea Systems WebLogic Server: up to and including 10.0

Published 2008-02-22. Last modified 2026-06-16.