7.6

CVE-2005-4765

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to sniff the connection.

Data is provided by the National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version7.0
Bea ≫ Weblogic Server Version7.0 Editionexpress
Bea ≫ Weblogic Server Version7.0 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp1
Bea ≫ Weblogic Server Version7.0 Updatesp1 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp1 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp2
Bea ≫ Weblogic Server Version7.0 Updatesp2 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp2 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp3
Bea ≫ Weblogic Server Version7.0 Updatesp3 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp3 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp4
Bea ≫ Weblogic Server Version7.0 Updatesp4 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp4 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp5
Bea ≫ Weblogic Server Version7.0 Updatesp5 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp5 Editionwin32
Bea ≫ Weblogic Server Version7.0 Updatesp6
Bea ≫ Weblogic Server Version7.0 Updatesp6 Editionexpress
Bea ≫ Weblogic Server Version7.0 Updatesp6 Editionwin32
Bea ≫ Weblogic Server Version8.1
Bea ≫ Weblogic Server Version8.1 Editionexpress
Bea ≫ Weblogic Server Version8.1 Editionwin32
Bea ≫ Weblogic Server Version8.1 Updatesp1
Bea ≫ Weblogic Server Version8.1 Updatesp1 Editionexpress
Bea ≫ Weblogic Server Version8.1 Updatesp1 Editionwin32
Bea ≫ Weblogic Server Version8.1 Updatesp2
Bea ≫ Weblogic Server Version8.1 Updatesp2 Editionexpress
Bea ≫ Weblogic Server Version8.1 Updatesp2 Editionwin32
Bea ≫ Weblogic Server Version8.1 Updatesp3
Bea ≫ Weblogic Server Version8.1 Updatesp3 Editionexpress
Bea ≫ Weblogic Server Version8.1 Updatesp3 Editionwin32
Bea ≫ Weblogic Server Version8.1 Updatesp4
Bea ≫ Weblogic Server Version8.1 Updatesp4 Editionexpress
Bea ≫ Weblogic Server Version8.1 Updatesp4 Editionwin32
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.46% 0.798
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C