CVE-2004-2424

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.

Affected (15)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 8.1
Bea Weblogic Server	Version 8.1
Bea Weblogic Server	Version 8.1
Bea Weblogic Server	Version 8.1 sp1
Bea Weblogic Server	Version 8.1 sp1
Bea Weblogic Server	Version 8.1 sp1
Bea Weblogic Server	Version 8.1 sp2
Bea Weblogic Server	Version 8.1 sp2
Bea Weblogic Server	Version 8.1 sp2
Bea Weblogic Server	Version 8.1 sp3
Bea Weblogic Server	Version 8.1 sp3
Bea Weblogic Server	Version 8.1 sp3
Bea Weblogic Server	Version 8.1 sp4
Bea Weblogic Server	Version 8.1 sp4
Bea Weblogic Server	Version 8.1 sp4