Loading vulnerability details…
CVSS v3.1
N/A
EPSS
9.99%
Published
Feb 22, 2008
Modified
Jun 16, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Weaknesses (CWE)
Affected Products (11)
References (8)