Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*

part: a version: 6.1 update: sp2

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Editionwin32
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1352 vulnerable 2026-06-08 04:48:56.994090 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.
Published: 2006-03-22T01:00:00.000Z
Updated: 2024-08-07T17:12:20.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4764 vulnerable 2026-06-08 04:48:44.975380 Details available
BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-17T03:43:22.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4763 vulnerable 2026-06-08 04:48:44.973905 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions.
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-16T16:53:44.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4762 vulnerable 2026-06-08 04:48:44.972424 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges.
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-16T20:17:21.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4761 vulnerable 2026-06-08 04:48:44.970827 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used.
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-16T17:47:51.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4750 vulnerable 2026-06-08 04:48:44.928857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1749 vulnerable 2026-06-08 04:48:27.375733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1748 vulnerable 2026-06-08 04:48:27.373871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1747 vulnerable 2026-06-08 04:48:27.372030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1746 vulnerable 2026-06-08 04:48:27.369920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1745 vulnerable 2026-06-08 04:48:27.368026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1743 vulnerable 2026-06-08 04:48:27.357729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1742 vulnerable 2026-06-08 04:48:27.331486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2696 vulnerable 2026-06-08 04:48:10.613752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2320 vulnerable 2026-06-08 04:48:09.272716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1758 vulnerable 2026-06-08 04:48:07.498083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1757 vulnerable 2026-06-08 04:48:07.485998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0713 vulnerable 2026-06-08 04:47:50.953259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1290 vulnerable 2026-06-08 04:47:47.188735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1223 vulnerable 2026-06-08 04:47:23.712275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1220 vulnerable 2026-06-08 04:47:23.699944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.