CVE-2008-0900
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 10.0%
exploitation probability
10.0%top 4% of all CVEs
observed exploitation
nono source reports it
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.
Affected products
n/a · n/a