CVE-2005-4763

HIGH 7.5CVE-2005-4763 · Published 31/12/2005 · updated 16/06/2026

In short

CVE-2005-4763 is a HIGH (CVSS 7.5) vulnerability affecting weblogic server (bea).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
weblogic server bea	`= 6.1= 7.0= 8.1`	No fix yet

Description

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions.

References

dev2dev.bea.com/pub/advisory/154
secunia.com/advisories/17138 · Vendor Advisory
securityfocus.com/bid/15052

More vulnerabilities in weblogic server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

weblogic server

bea

= 6.1= 7.0= 8.1

No fix yet

Description

More vulnerabilities in weblogic server

See all →