Approved changes feed: RSS · Atom

cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*

part: a version: 6.1 update: sp6

VendorBea (c4fe31a7-8f48-5c00-b7c2-e6a20391219c)
ProductWeblogic Server (ebf23157-7e5f-5cf4-ba69-dda04749aa52)
Editionwin32
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1352 vulnerable 2026-06-08 04:48:56.996781 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.
Published: 2006-03-22T01:00:00.000Z
Updated: 2024-08-07T17:12:20.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4764 vulnerable 2026-06-08 04:48:44.975574 Details available
BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-17T03:43:22.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4763 vulnerable 2026-06-08 04:48:44.974026 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions.
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-16T16:53:44.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4762 vulnerable 2026-06-08 04:48:44.972656 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges.
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-16T20:17:21.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4761 vulnerable 2026-06-08 04:48:44.971037 Details available
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used.
Published: 2006-04-01T02:00:00.000Z
Updated: 2024-09-16T17:47:51.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4750 vulnerable 2026-06-08 04:48:44.933502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1749 vulnerable 2026-06-08 04:48:27.375906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1748 vulnerable 2026-06-08 04:48:27.374045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1747 vulnerable 2026-06-08 04:48:27.372209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1746 vulnerable 2026-06-08 04:48:27.370104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1745 vulnerable 2026-06-08 04:48:27.368207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1743 vulnerable 2026-06-08 04:48:27.357910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1742 vulnerable 2026-06-08 04:48:27.337826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2696 vulnerable 2026-06-08 04:48:10.616617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2320 vulnerable 2026-06-08 04:48:09.272912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1757 vulnerable 2026-06-08 04:48:07.491380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0713 vulnerable 2026-06-08 04:47:50.954251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1290 vulnerable 2026-06-08 04:47:47.193772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.