Lucene search

[email protected]CVE-2005-4763

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-4763

2022-10-0316:22:44

[email protected]

web.nvd.nist.gov

cve-2005-4763

bea weblogic server

weblogic express

iiop

security vulnerability

unauthorized actions

remote attackers

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions.

Affected configurations

NVD

Node

beaweblogic_serverMatch6.1win32

beaweblogic_serverMatch6.1sp1

beaweblogic_serverMatch6.1sp1win32

beaweblogic_serverMatch6.1sp2

beaweblogic_serverMatch6.1sp2win32

beaweblogic_serverMatch6.1sp3

beaweblogic_serverMatch6.1sp4

beaweblogic_serverMatch6.1sp4win32

beaweblogic_serverMatch6.1sp5

beaweblogic_serverMatch6.1sp5win32

beaweblogic_serverMatch6.1sp6

beaweblogic_serverMatch6.1sp6win32

beaweblogic_serverMatch6.1sp7

beaweblogic_serverMatch6.1sp7win32

beaweblogic_serverMatch6.1sp8

beaweblogic_serverMatch6.1sp8win32

beaweblogic_serverMatch7.0

beaweblogic_serverMatch7.0win32

beaweblogic_serverMatch7.0sp1

beaweblogic_serverMatch7.0sp1win32

beaweblogic_serverMatch7.0sp2

beaweblogic_serverMatch7.0sp3

beaweblogic_serverMatch7.0sp3win32

beaweblogic_serverMatch7.0sp4

beaweblogic_serverMatch7.0sp4win32

beaweblogic_serverMatch7.0sp5

beaweblogic_serverMatch7.0sp5win32

beaweblogic_serverMatch7.0sp6

beaweblogic_serverMatch7.0sp6win32

beaweblogic_serverMatch7.0sp7

beaweblogic_serverMatch7.0sp7win32

beaweblogic_serverMatch8.1

beaweblogic_serverMatch8.1win32

beaweblogic_serverMatch8.1sp1

beaweblogic_serverMatch8.1sp1win32

beaweblogic_serverMatch8.1sp2

beaweblogic_serverMatch8.1sp2win32

beaweblogic_serverMatch8.1sp3

beaweblogic_serverMatch8.1sp3win32

beaweblogic_serverMatch8.1sp4

beaweblogic_serverMatch8.1sp4win32

beaweblogic_serverMatch8.1sp5

beaweblogic_serverMatch8.1sp5win32

CPENameOperatorVersion
bea:weblogic_serverbea weblogic servereq6.1
bea:weblogic_serverbea weblogic servereq7.0
bea:weblogic_serverbea weblogic servereq8.1

CPE	Name	Operator	Version
bea:weblogic_server	bea weblogic server	eq	6.1
bea:weblogic_server	bea weblogic server	eq	7.0
bea:weblogic_server	bea weblogic server	eq	8.1

References

dev2dev.bea.com/pub/advisory/154

secunia.com/advisories/17138

www.securityfocus.com/bid/15052

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

Related for CVE-2005-4763

cvelist1 nvd1