VULHUB ™

BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic data to web and wireless applications. It is possible to cause the server to disclose JSP script source code. This is due to difficulties parsing certain types of malformed requests, such as those containing null characters (%00). Disclosure of script source code may aid allow the attacker to probe for other vulnerabilities or may disclose sensitive information such as database credentials.

BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic data to web and wireless applications. It is possible to cause the server to disclose JSP script source code. This is due to difficulties parsing certain types of malformed requests, such as those containing null characters (%00). Disclosure of script source code may aid allow the attacker to probe for other vulnerabilities or may disclose sensitive information such as database credentials.