CVE-2003-1225: Bea WebLogic Server

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.

Affected products

• Bea WebLogic Server: version 7.0 only; version 7.0.0.1 only

Published 2003-12-31. Last modified 2026-06-16.