CVE-2004-1758

BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges.

• http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jspPatch, Vendor Advisory
• http://secunia.com/advisories/11357
• http://securitytracker.com/id?1009764
• http://www.kb.cert.org/vuls/id/920238Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/5297
• http://www.securityfocus.com/bid/10131Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15860
• http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jspPatch, Vendor Advisory
• http://secunia.com/advisories/11357
• http://securitytracker.com/id?1009764
• http://www.kb.cert.org/vuls/id/920238Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/5297
• http://www.securityfocus.com/bid/10131Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15860

Published

Apr 13, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1752Stack-based buffer overflow in Gaucho 1.4 Build 145 allows r…
• CVE-2004-1753The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozi…
• CVE-2004-1754The DNS proxy (DNSd) for multiple Symantec Gateway Security …
• CVE-2004-1755The Web Services fat client for BEA WebLogic Server and Expr…
• CVE-2004-1756BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier…
• CVE-2004-1757BEA WebLogic Server and Express 8.1, SP1 and earlier, stores…
• CVE-2004-1759Cisco voice products, when running the IBM Director Agent on…
• CVE-2004-1760The default installation of Cisco voice products, when runni…
• CVE-2004-1761Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows at…
• CVE-2004-1762Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for…
• CVE-2004-1763Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.…
• CVE-2004-1764Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B…