CVE-2003-1222: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password.

Affected products

• Bea WebLogic Server: version 8.1 only

Published 2003-12-31. Last modified 2026-06-16.