CVE-2008-0901
No CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-200, CWE-255
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bea:weblogic_server
- bea_systems:weblogic_server