Vulnerability Details : CVE-2003-1094
BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user, such as in the frequent use of JNDI initial contexts, which could allow remote authenticated users to gain privileges.
Exploit prediction scoring system (EPSS) score for CVE-2003-1094
Probability of exploitation activity in the next 30 days: 0.43%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 71 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2003-1094
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
References for CVE-2003-1094
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/12799
-
http://www.kb.cert.org/vuls/id/999788
Third Party Advisory;US Government Resource
-
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-35.jsp
-
http://www.securityfocus.com/bid/8320
Patch
Products affected by CVE-2003-1094
- cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*