Vulnerability in Bea Weblogic Server
CVE-2004-2424
BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.
EPSS: 0.018 (75.6th percentile) — read the EPSS interpretation.
Affected products
- Bea Weblogic_server — versions 8.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, x_refsource_BEA, Patch, Vendor Advisory)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, Patch, vdb-entry)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)