CVE-2005-4704
Last modified
CVE-2005-4704 is a vulnerability of currently unknown severity. Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges.. EPSS estimates a 1.31% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bea | Weblogic Server | 6.1 |
| Bea | Weblogic Server | 7.0 |
| Bea | Weblogic Server | 8.1 |
References
- http://dev2dev.bea.com/pub/advisory/140Patch, Vendor Advisory
- http://dev2dev.bea.com/pub/advisory/140Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-4704?
How severe is CVE-2005-4704?
How do I fix CVE-2005-4704?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-4698Cross-site scripting (XSS) vulnerability in TellMe 1.2 and e…
- CVE-2005-4699Argument injection vulnerability in TellMe 1.2 and earlier a…
- CVE-2005-4700TellMe 1.2 and earlier, when the Server (o_Server) and HEAD …
- CVE-2005-4701Unspecified vulnerability in Process File System (procfs) in…
- CVE-2005-4702SQL injection vulnerability in the favorites module in index…
- CVE-2005-4703Apache Tomcat 4.0.3, when running on Windows, allows remote …
- CVE-2005-4705BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.…
- CVE-2005-4706Unspecified vulnerability in the "privilege management" feat…
- CVE-2005-4707Multiple cross-site scripting (XSS) vulnerabilities in PHP G…
- CVE-2005-4708Adobe Macromedia MX 2004 products, Captivate, Contribute 2, …
- CVE-2005-4709The popSubjectContext method in the SecurityAssociation clas…
- CVE-2005-4710Unspecified vulnerability in multiple Autodesk and AutoCAD p…
Are you affected by CVE-2005-4704?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST