4.6

CVE-2005-1745

The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password.

Data is provided by the National Vulnerability Database (NVD)
BeaWeblogic Server Version6.0
BeaWeblogic Server Version6.0 Editionexpress
BeaWeblogic Server Version6.0 Editionwin32
BeaWeblogic Server Version6.0 Updatesp1
BeaWeblogic Server Version6.0 Updatesp1 Editionexpress
BeaWeblogic Server Version6.0 Updatesp1 Editionwin32
BeaWeblogic Server Version6.0 Updatesp2
BeaWeblogic Server Version6.0 Updatesp2 Editionexpress
BeaWeblogic Server Version6.0 Updatesp2 Editionwin32
BeaWeblogic Server Version6.1
BeaWeblogic Server Version6.1 Editionexpress
BeaWeblogic Server Version6.1 Editionwin32
BeaWeblogic Server Version6.1 Updatesp1
BeaWeblogic Server Version6.1 Updatesp1 Editionexpress
BeaWeblogic Server Version6.1 Updatesp1 Editionwin32
BeaWeblogic Server Version6.1 Updatesp2
BeaWeblogic Server Version6.1 Updatesp2 Editionexpress
BeaWeblogic Server Version6.1 Updatesp2 Editionwin32
BeaWeblogic Server Version6.1 Updatesp3
BeaWeblogic Server Version6.1 Updatesp3 Editionexpress
BeaWeblogic Server Version6.1 Updatesp3 Editionwin32
BeaWeblogic Server Version6.1 Updatesp4
BeaWeblogic Server Version6.1 Updatesp4 Editionexpress
BeaWeblogic Server Version6.1 Updatesp4 Editionwin32
BeaWeblogic Server Version6.1 Updatesp5
BeaWeblogic Server Version6.1 Updatesp5 Editionexpress
BeaWeblogic Server Version6.1 Updatesp5 Editionwin32
BeaWeblogic Server Version6.1 Updatesp6
BeaWeblogic Server Version6.1 Updatesp6 Editionwin32
BeaWeblogic Server Version7.0
BeaWeblogic Server Version7.0 Editionexpress
BeaWeblogic Server Version7.0 Editionwin32
BeaWeblogic Server Version7.0 Updatesp1
BeaWeblogic Server Version7.0 Updatesp1 Editionexpress
BeaWeblogic Server Version7.0 Updatesp1 Editionwin32
BeaWeblogic Server Version7.0 Updatesp2
BeaWeblogic Server Version7.0 Updatesp2 Editionexpress
BeaWeblogic Server Version7.0 Updatesp2 Editionwin32
BeaWeblogic Server Version7.0 Updatesp3
BeaWeblogic Server Version7.0 Updatesp3 Editionexpress
BeaWeblogic Server Version7.0 Updatesp3 Editionwin32
BeaWeblogic Server Version7.0 Updatesp4
BeaWeblogic Server Version7.0 Updatesp4 Editionexpress
BeaWeblogic Server Version7.0 Updatesp4 Editionwin32
BeaWeblogic Server Version7.0 Updatesp5
BeaWeblogic Server Version7.0 Updatesp5 Editionexpress
BeaWeblogic Server Version7.0 Updatesp5 Editionwin32
BeaWeblogic Server Version7.0.0.1
BeaWeblogic Server Version7.0.0.1 Editionexpress
BeaWeblogic Server Version7.0.0.1 Editionwin32
BeaWeblogic Server Version7.0.0.1 Updatesp1
BeaWeblogic Server Version7.0.0.1 Updatesp1 Editionexpress
BeaWeblogic Server Version7.0.0.1 Updatesp1 Editionwin32
BeaWeblogic Server Version7.0.0.1 Updatesp2
BeaWeblogic Server Version7.0.0.1 Updatesp2 Editionexpress
BeaWeblogic Server Version7.0.0.1 Updatesp2 Editionwin32
BeaWeblogic Server Version7.0.0.1 Updatesp3
BeaWeblogic Server Version7.0.0.1 Updatesp3 Editionexpress
BeaWeblogic Server Version7.0.0.1 Updatesp4
BeaWeblogic Server Version7.0.0.1 Updatesp4 Editionexpress
BeaWeblogic Server Version8.1
BeaWeblogic Server Version8.1 Editionexpress
BeaWeblogic Server Version8.1 Editionwin32
BeaWeblogic Server Version8.1 Updatesp1
BeaWeblogic Server Version8.1 Updatesp1 Editionexpress
BeaWeblogic Server Version8.1 Updatesp1 Editionwin32
BeaWeblogic Server Version8.1 Updatesp2
BeaWeblogic Server Version8.1 Updatesp2 Editionexpress
BeaWeblogic Server Version8.1 Updatesp2 Editionwin32
BeaWeblogic Server Version8.1 Updatesp3
BeaWeblogic Server Version8.1 Updatesp3 Editionexpress
BeaWeblogic Server Version8.1 Updatesp3 Editionwin32
BeaWeblogic Server Version8.1 Updatesp4
BeaWeblogic Server Version8.1 Updatesp4 Editionexpress
BeaWeblogic Server Version8.1 Updatesp4 Editionwin32
OracleWeblogic Portal Version8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.54% 0.649
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P