VulnerabilityModified
CVE-2005-4761
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the…
LOW 1.2EPSS 0.36%
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D option is used.
- CVSS 2.0
- 1.2 LOWAV:L/AC:H/Au:N/C:P/I:N/A:N
- EPSS
- 0.36% probability · 29th percentile
- CISA KEV
- Not listed
- Affected
- bea/weblogic server
- Source
- cve@mitre.org
References
- http://dev2dev.bea.com/pub/advisory/152Patch, Vendor Advisory
- http://secunia.com/advisories/17138Patch, Vendor Advisory
- http://www.securityfocus.com/bid/15052Patch
- http://dev2dev.bea.com/pub/advisory/152Patch, Vendor Advisory
- http://secunia.com/advisories/17138Patch, Vendor Advisory
- http://www.securityfocus.com/bid/15052Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.