cbcvebase.
CVE-2005-4756
published 2005-12-31

CVE-2005-4756: BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived Principals with multiple…

PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.79%
75.5th percentile
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived Principals with multiple PrincipalValidators, which might allow attackers to gain privileges.

Affected

2 ranges
VendorProductVersion rangeFixed in
beaweblogic_server——
beaweblogic_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.