CVE-2008-0900

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

CVSS v2.0 NVD

6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

9.99% chance of exploitation in the next 30 days, 96th percentile

Published

2008-02-22

Updated

2024-08-07

Proof-of-concept exploits (1)

• 0b0111100/20080★ · 2026-09-07

Exploit collections (1)

• CVE-2008-0900helloexp/0day

Security advisories

• http://dev2dev.bea.com/pub/advisory/270

References

• CVE Record
• NVD entry

Related

• CVE-2004-0077
• CVE-2004-1235
• CVE-2005-0736
• CVE-2005-1263
• CVE-2006-2451
• CVE-2006-3626