CVE-2004-23205.3MediumCWE-200

CVE-2004-2320: Bea Weblogic Server vulnerability

Bea · Weblogic Server

Vendor fix available · Affected: Bea Weblogic Server · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

2.9%probability of exploitation in the next 30 days

87th percentile

050100

Higher than 87% of scored CVEs

5.3MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Information Exposure · Information Disclosure
Vendor: Bea
Published: August 2005
Band: Possible (1 to 10%), August 2005

CoverageNo articles yet

No CyberSIXT article names CVE-2004-2320 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.