Vulnerabilities > CVE-2005-4757 - Unspecified vulnerability in BEA Weblogic Server 7.0/8.1
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/" (slash) servlet root URL pattern, which might allow remote attackers to bypass intended servlet protections.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 20 |