CVE-2003-1224: Bea WebLogic Server

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing ("shoulder surfing") the screen.

Affected products

• Bea WebLogic Server: version 7.0 only; version 7.0.0.1 only

Published 2003-12-31. Last modified 2026-06-16.