VULNERABILITY INTELLIGENCE

CVE-2005-1748

CVSS score5 MEDIUM
EPSS probability2.63%
CISA KEVNot currently listed
Published2005-05-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.

Primary references