CVSS: 1.2EPSS: 0%CPEs: 57EXPL: 0CVE-2005-4761
https://notcve.org/view.php?id=CVE-2005-4761
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used. • http://dev2dev.bea.com/pub/advisory/152 http://secunia.com/advisories/17138 http://www.securityfocus.com/bid/15052 •
CVSS: 7.5EPSS: 0%CPEs: 22EXPL: 0CVE-2005-4756
https://notcve.org/view.php?id=CVE-2005-4756
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived Principals with multiple PrincipalValidators, which might allow attackers to gain privileges. • http://dev2dev.bea.com/pub/advisory/146 http://secunia.com/advisories/17138 http://www.securityfocus.com/bid/15052 •
CVSS: 7.2EPSS: 0%CPEs: 58EXPL: 0CVE-2005-4762
https://notcve.org/view.php?id=CVE-2005-4762
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges. • http://dev2dev.bea.com/pub/advisory/153 http://secunia.com/advisories/17138 http://www.securityfocus.com/bid/15052 •
CVSS: 5.0EPSS: 0%CPEs: 8EXPL: 0CVE-2005-4754
https://notcve.org/view.php?id=CVE-2005-4754
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allow remote attackers to obtain sensitive information (intranet IP addresses) via unknown attack vectors involving "network address translation." • http://dev2dev.bea.com/pub/advisory/144 http://secunia.com/advisories/17138 http://www.securityfocus.com/bid/15052 •
CVSS: 7.5EPSS: 2%CPEs: 43EXPL: 0CVE-2005-4763
https://notcve.org/view.php?id=CVE-2005-4763
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to perform unauthorized actions. • http://dev2dev.bea.com/pub/advisory/154 http://secunia.com/advisories/17138 http://www.securityfocus.com/bid/15052 •