CVE-2004-2696

Severity: medium (CVSS 5.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-255

Description

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call.

Affected products

Bea Weblogic Server: 6.1, 6.1-sp1, 6.1-sp2, 6.1-sp3, 6.1-sp4, 6.1-sp5 (+15)

References

http://dev2dev.bea.com/pub/advisory/59
http://secunia.com/advisories/11865
http://securitytracker.com/id?1010493
http://www.osvdb.org/7081
http://www.securityfocus.com/bid/10545
https://exchange.xforce.ibmcloud.com/vulnerabilities/16421
http://dev2dev.bea.com/pub/advisory/59
http://secunia.com/advisories/11865
http://securitytracker.com/id?1010493
http://www.osvdb.org/7081
http://www.securityfocus.com/bid/10545
https://exchange.xforce.ibmcloud.com/vulnerabilities/16421

Get alerted when CVE-2004-2696 or the next vulnerability affects your stack