Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2007-10-18	CVE-2007-5576	Information Exposure vulnerability in multiple products BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands. local low complexity bea oracle CWE-200	6.8
2003-10-20	CVE-2003-0733	Cross-Site Scripting vulnerability in Bea WebLogic/Liquid Data Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application. network bea	6.8