Skip to content
OpenAdvisories
Unscored CVE-2005-4757 EUVD-2005-4750GHSA-jcg8-68f4-v6r7

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/" (slash) servlet ro…

Published Apr 1, 2006 · Updated Sep 16, 2024 · Assigned by mitre

Description

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/" (slash) servlet root URL pattern, which might allow remote attackers to bypass intended servlet protections.

References