CVE-2005-4754

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allow remote attackers to obtain sensitive information (intranet IP addresses) via unknown attack vectors involving "network address translation."

Ссылки

http://dev2dev.bea.com/pub/advisory/144
Patch
Vendor Advisory
http://secunia.com/advisories/17138
Third Party Advisory
http://www.securityfocus.com/bid/15052
Third Party Advisory
VDB Entry
http://dev2dev.bea.com/pub/advisory/144
Patch
Vendor Advisory
http://secunia.com/advisories/17138
Third Party Advisory
http://www.securityfocus.com/bid/15052
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*

cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*

EPSS

Процентиль: 75%

0.00872

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-q6mr-262c-p36r

github

почти 4 года назад