VULNERABILITY INTELLIGENCE

CVE-2005-4764

CVSS score7.8 HIGH
EPSS probability1.65%
CISA KEVNot currently listed
Published2005-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).

Primary references