VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 27, 2003· Updated Jun 16, 2026

CVE-2003-0640

CVE-2003-0640

Description

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Bea/WebLogic Server3 versions
    cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:*:*:express:*:*:*:*:*
    • (no CPE)
  • Bea/WebLogic Expressllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.