CVE-2005-4764

First published: Sat Dec 31 2005(Updated: )

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• collector/nvd-index
• agent/severity
• agent/author
• agent/weakness
• agent/references
• agent/type
• agent/description
• agent/event
• agent/softwarecombine
• agent/first-publish-date
• agent/last-modified-date
• agent/remedy
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/bea
• canonical/bea weblogic server
• version/bea weblogic server/8.1
• version/bea weblogic server/8.1-sp4
• version/bea weblogic server/7.0-sp2
• version/bea weblogic server/6.1-sp4
• version/bea weblogic server/7.0-sp7
• version/bea weblogic server/6.1
• version/bea weblogic server/6.1-sp5
• version/bea weblogic server/6.1-sp6
• version/bea weblogic server/7.0-sp4
• version/bea weblogic server/6.1-sp1
• version/bea weblogic server/7.0
• version/bea weblogic server/6.1-sp7
• version/bea weblogic server/6.1-sp3
• version/bea weblogic server/8.1-sp5
• version/bea weblogic server/6.1-sp8
• version/bea weblogic server/7.0-sp6
• version/bea weblogic server/7.0-sp3
• version/bea weblogic server/8.1-sp1
• version/bea weblogic server/6.1-sp2
• version/bea weblogic server/8.1-sp3
• version/bea weblogic server/7.0-sp5
• version/bea weblogic server/8.1-sp2
• version/bea weblogic server/7.0-sp1