What’s Vulnerable › Vulnerabilities

CVE-2005-4764

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-12-31 · updated 2026-06-16

Description

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).

Affected products

• Bea Weblogic Server: 6.1, 6.1-sp1, 6.1-sp2, 6.1-sp3, 6.1-sp4, 6.1-sp5 (+17)

References

• http://dev2dev.bea.com/pub/advisory/155
• http://secunia.com/advisories/17138
• http://www.securityfocus.com/bid/15052
• http://dev2dev.bea.com/pub/advisory/155
• http://secunia.com/advisories/17138
• http://www.securityfocus.com/bid/15052

Get alerted when CVE-2005-4764 or the next vulnerability affects your stack