Vulnerability in Bea Weblogic Server

CVE-2005-4764

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

Bea Weblogic_server — versions 6.1, 7.0, 8.1
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_BEA, Patch, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)