CVE-2002-1030

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-10-04 · updated 2026-06-16

Description

Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.

Affected products

Bea Weblogic Server: 5.1, 5.1-sp1, 5.1-sp10, 5.1-sp11, 5.1-sp12, 5.1-sp2 (+15)

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0008.html
http://dev2dev.bea.com/resourcelibrary/advisoriesdetail.jsp?highlight=advisoriesnotifications&path=components%2Fdev2dev%2Fresourcelibrary%2Fadvisoriesnotifications%2Fadvisory_BEA02-19.htm
http://online.securityfocus.com/archive/1/281046
http://www.iss.net/security_center/static/9486.php
http://www.securityfocus.com/bid/5159
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0008.html
http://dev2dev.bea.com/resourcelibrary/advisoriesdetail.jsp?highlight=advisoriesnotifications&path=components%2Fdev2dev%2Fresourcelibrary%2Fadvisoriesnotifications%2Fadvisory_BEA02-19.htm
http://online.securityfocus.com/archive/1/281046
http://www.iss.net/security_center/static/9486.php
http://www.securityfocus.com/bid/5159

Get alerted when CVE-2002-1030 or the next vulnerability affects your stack