CVE-2003-1093: Bea WebLogic Server

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException.

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only; version 7.0.0.1 only

Published 2003-12-31. Last modified 2026-06-16.