Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2004-2320

🗓️ 16 Aug 2005 04:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 552 Views

BEA WebLogic Server and Express vulnerability allowing XST attack

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Tenable Nessus		BEA WebLogic < 8.1.0 SP 3 Multiple Vulnerabilities
14 Sep 200400:00
–nessus
Tenable Nessus		HTTP Reverse Proxy Detection (Deprecated)
2 Jul 200200:00
–nessus
Tenable Nessus		WebLogic < 8.1 SP3 Multiple Vulnerabilities
14 Sep 200400:00
–nessus
Tenable Nessus		HTTP TRACE / TRACK Methods Allowed
23 Jan 200300:00
–nessus
ATTACKERKB		CVE-2004-2320
31 Dec 200405:00
–attackerkb
Broadcom		BSA-2016-012
24 Oct 201600:00
–broadcom
Cvelist		CVE-2004-2320
16 Aug 200504:00
–cvelist
EUVD		EUVD-2004-2312
7 Oct 202500:30
–euvd
EUVD		EUVD-2025-27982
3 Oct 202520:07
–euvd
F5 Networks		K15904: Multiple third-party application-server vulnerabilities
21 Feb 202318:11
–f5
Rows per page
NVD
Node
beaweblogic_serverMatch5.1express
OR
beaweblogic_serverMatch5.1win32
OR
beaweblogic_serverMatch5.1sp1
OR
beaweblogic_serverMatch5.1sp1express
OR
beaweblogic_serverMatch5.1sp1win32
OR
beaweblogic_serverMatch5.1sp10
OR
beaweblogic_serverMatch5.1sp10express
OR
beaweblogic_serverMatch5.1sp10win32
OR
beaweblogic_serverMatch5.1sp11
OR
beaweblogic_serverMatch5.1sp11express
OR
beaweblogic_serverMatch5.1sp11win32
OR
beaweblogic_serverMatch5.1sp12
OR
beaweblogic_serverMatch5.1sp12express
OR
beaweblogic_serverMatch5.1sp12win32
OR
beaweblogic_serverMatch5.1sp13
OR
beaweblogic_serverMatch5.1sp13express
OR
beaweblogic_serverMatch5.1sp13win32
OR
beaweblogic_serverMatch5.1sp2
OR
beaweblogic_serverMatch5.1sp2express
OR
beaweblogic_serverMatch5.1sp2win32
OR
beaweblogic_serverMatch5.1sp3
OR
beaweblogic_serverMatch5.1sp3express
OR
beaweblogic_serverMatch5.1sp3win32
OR
beaweblogic_serverMatch5.1sp4
OR
beaweblogic_serverMatch5.1sp4express
OR
beaweblogic_serverMatch5.1sp4win32
OR
beaweblogic_serverMatch5.1sp5
OR
beaweblogic_serverMatch5.1sp5express
OR
beaweblogic_serverMatch5.1sp5win32
OR
beaweblogic_serverMatch5.1sp6
OR
beaweblogic_serverMatch5.1sp6express
OR
beaweblogic_serverMatch5.1sp6win32
OR
beaweblogic_serverMatch5.1sp7
OR
beaweblogic_serverMatch5.1sp7express
OR
beaweblogic_serverMatch5.1sp7win32
OR
beaweblogic_serverMatch5.1sp8
OR
beaweblogic_serverMatch5.1sp8express
OR
beaweblogic_serverMatch5.1sp8win32
OR
beaweblogic_serverMatch5.1sp9
OR
beaweblogic_serverMatch5.1sp9express
OR
beaweblogic_serverMatch5.1sp9win32
OR
beaweblogic_serverMatch6.1
OR
beaweblogic_serverMatch6.1express
OR
beaweblogic_serverMatch6.1win32
OR
beaweblogic_serverMatch6.1sp1
OR
beaweblogic_serverMatch6.1sp1express
OR
beaweblogic_serverMatch6.1sp1win32
OR
beaweblogic_serverMatch6.1sp2
OR
beaweblogic_serverMatch6.1sp2express
OR
beaweblogic_serverMatch6.1sp2win32
OR
beaweblogic_serverMatch6.1sp3
OR
beaweblogic_serverMatch6.1sp3express
OR
beaweblogic_serverMatch6.1sp3win32
OR
beaweblogic_serverMatch6.1sp4
OR
beaweblogic_serverMatch6.1sp4express
OR
beaweblogic_serverMatch6.1sp4win32
OR
beaweblogic_serverMatch6.1sp5
OR
beaweblogic_serverMatch6.1sp5express
OR
beaweblogic_serverMatch6.1sp5win32
OR
beaweblogic_serverMatch6.1sp6
OR
beaweblogic_serverMatch6.1sp6win32
OR
beaweblogic_serverMatch7.0
OR
beaweblogic_serverMatch7.0express
OR
beaweblogic_serverMatch7.0win32
OR
beaweblogic_serverMatch7.0sp1
OR
beaweblogic_serverMatch7.0sp1express
OR
beaweblogic_serverMatch7.0sp1win32
OR
beaweblogic_serverMatch7.0sp2
OR
beaweblogic_serverMatch7.0sp2express
OR
beaweblogic_serverMatch7.0sp2win32
OR
beaweblogic_serverMatch7.0sp3
OR
beaweblogic_serverMatch7.0sp3express
OR
beaweblogic_serverMatch7.0sp3win32
OR
beaweblogic_serverMatch7.0sp4
OR
beaweblogic_serverMatch7.0sp4express
OR
beaweblogic_serverMatch7.0sp4win32
OR
beaweblogic_serverMatch8.1
OR
beaweblogic_serverMatch8.1express
OR
beaweblogic_serverMatch8.1win32
OR
beaweblogic_serverMatch8.1sp1
OR
beaweblogic_serverMatch8.1sp1express
OR
beaweblogic_serverMatch8.1sp1win32
OR
beaweblogic_serverMatch8.1sp2
OR
beaweblogic_serverMatch8.1sp2express
OR
beaweblogic_serverMatch8.1sp2win32

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 May 2026 19:16Current
6.2Medium risk
Vulners AI Score6.2
CVSS 25.8
CVSS 3.15.3
EPSS0.04031
SSVC
CWE-200
cve-2004-2320information securitybea weblogic serverexpressxst attacksvulnerabilityhttp trace requestremote attackerscross-site scripting
552