CVE-2005-1743

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-24 · updated 2026-06-16

Description

BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions.

Affected products

Bea Weblogic Server: 6.0, 6.0-sp1, 6.0-sp2, 6.1, 6.1-sp1, 6.1-sp2 (+20)
Oracle Weblogic Portal: 8.0

References

http://dev2dev.bea.com/pub/advisory/126
http://secunia.com/advisories/15486
http://securitytracker.com/id?1014049
http://www.securityfocus.com/bid/13717
http://www.vupen.com/english/advisories/2005/0603
http://dev2dev.bea.com/pub/advisory/126
http://secunia.com/advisories/15486
http://securitytracker.com/id?1014049
http://www.securityfocus.com/bid/13717
http://www.vupen.com/english/advisories/2005/0603

Get alerted when CVE-2005-1743 or the next vulnerability affects your stack