Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2005-4764

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).

  • Published: Dec 31, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-4764
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:C/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
bea / weblogic_server 8.1 8.1.x
bea / weblogic_server 8.1-sp4 8.1-sp4.x
bea / weblogic_server 7.0-sp2 7.0-sp2.x
bea / weblogic_server 6.1-sp4 6.1-sp4.x
bea / weblogic_server 7.0-sp7 7.0-sp7.x
bea / weblogic_server 6.1 6.1.x
bea / weblogic_server 6.1-sp5 6.1-sp5.x
bea / weblogic_server 6.1-sp6 6.1-sp6.x
bea / weblogic_server 7.0-sp4 7.0-sp4.x
bea / weblogic_server 6.1-sp1 6.1-sp1.x
bea / weblogic_server 7.0 7.0.x
bea / weblogic_server 6.1-sp7 6.1-sp7.x
bea / weblogic_server 6.1-sp3 6.1-sp3.x
bea / weblogic_server 8.1-sp5 8.1-sp5.x
bea / weblogic_server 6.1-sp8 6.1-sp8.x
bea / weblogic_server 7.0-sp6 7.0-sp6.x
bea / weblogic_server 7.0-sp3 7.0-sp3.x
bea / weblogic_server 8.1-sp1 8.1-sp1.x
bea / weblogic_server 6.1-sp2 6.1-sp2.x
bea / weblogic_server 8.1-sp3 8.1-sp3.x
bea / weblogic_server 7.0-sp5 7.0-sp5.x
bea / weblogic_server 8.1-sp2 8.1-sp2.x
bea / weblogic_server 7.0-sp1 7.0-sp1.x