5

CVE-2004-2424

BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
BeaWeblogic Server Version8.1
BeaWeblogic Server Version8.1 Editionexpress
BeaWeblogic Server Version8.1 Editionwin32
BeaWeblogic Server Version8.1 Updatesp1
BeaWeblogic Server Version8.1 Updatesp1 Editionexpress
BeaWeblogic Server Version8.1 Updatesp1 Editionwin32
BeaWeblogic Server Version8.1 Updatesp2
BeaWeblogic Server Version8.1 Updatesp2 Editionexpress
BeaWeblogic Server Version8.1 Updatesp2 Editionwin32
BeaWeblogic Server Version8.1 Updatesp3
BeaWeblogic Server Version8.1 Updatesp3 Editionexpress
BeaWeblogic Server Version8.1 Updatesp3 Editionwin32
BeaWeblogic Server Version8.1 Updatesp4
BeaWeblogic Server Version8.1 Updatesp4 Editionexpress
BeaWeblogic Server Version8.1 Updatesp4 Editionwin32
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.12% 0.763
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P