CVE-2005-4751

EPSS 1.64%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 16.06.2026 22:19:21
Erkennungen
Login

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9.0, 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allow remote attackers to inject arbitrary web script or HTML and gain administrative privileges via unknown attack vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 42 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bea ≫ Weblogic Server Version 6.1

Bea ≫ Weblogic Server Version 6.1 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp1

Bea ≫ Weblogic Server Version 6.1 Update sp1 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp2

Bea ≫ Weblogic Server Version 6.1 Update sp2 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp3

Bea ≫ Weblogic Server Version 6.1 Update sp3 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp4

Bea ≫ Weblogic Server Version 6.1 Update sp4 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp5

Bea ≫ Weblogic Server Version 6.1 Update sp5 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp6

Bea ≫ Weblogic Server Version 6.1 Update sp6 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp7

Bea ≫ Weblogic Server Version 6.1 Update sp7 Edition express

Bea ≫ Weblogic Server Version 7.0

Bea ≫ Weblogic Server Version 7.0 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp1

Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp2

Bea ≫ Weblogic Server Version 7.0 Update sp2 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp3

Bea ≫ Weblogic Server Version 7.0 Update sp3 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp4

Bea ≫ Weblogic Server Version 7.0 Update sp4 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp5

Bea ≫ Weblogic Server Version 7.0 Update sp5 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp6

Bea ≫ Weblogic Server Version 7.0 Update sp6 Edition express

Bea ≫ Weblogic Server Version 8.1

Bea ≫ Weblogic Server Version 8.1 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp1

Bea ≫ Weblogic Server Version 8.1 Update sp1 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp2

Bea ≫ Weblogic Server Version 8.1 Update sp2 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp3

Bea ≫ Weblogic Server Version 8.1 Update sp3 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp4

Bea ≫ Weblogic Server Version 8.1 Update sp4 Edition express

Bea ≫ Weblogic Server Version 9.0

Bea ≫ Weblogic Server Version 9.0 Edition express

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.64%	0.733

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/17138

Third Party Advisory

http://www.securityfocus.com/bid/15052

Third Party Advisory

VDB Entry

http://dev2dev.bea.com/pub/advisory/139

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2005-4751

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4751

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4751

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2005-4751