CVE-2004-0471

Published: Jul 7, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).

Affected (4)

Products: Bea: Weblogic Server

1 product

Weblogic Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 8.1
Bea Weblogic Server	Version 8.1

References (12)

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/11594

Source: cve@mitre.org

http://securitytracker.com/id?1010129

Source: cve@mitre.org

http://www.osvdb.org/6077

Source: cve@mitre.org

http://www.securityfocus.com/bid/10327

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16121

Source: cve@mitre.org

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/11594

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1010129

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/6077

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10327

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16121

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.